last executing test programs: 3m51.025319549s ago: executing program 2 (id=188): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000000)=0x1) (async) r1 = socket$kcm(0x29, 0x5, 0x0) (async, rerun: 32) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) (rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r0, r2}) r3 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f00000000c0)) r4 = socket$netlink(0x10, 0x3, 0xd9e1c34df96c561f) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x190, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1d}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x32e}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_MASTER={0x7c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_NAT_DST={0x78, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}, @CTA_MARK_MASK={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc86}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x190}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000380)={r3}) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000000440)={0x10, 0x0, "a9be45c8e85fbee0431245912503da2a"}) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000480)='xfrm0\x00') (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000004c0)={0x2}, 0x4) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bind(r7, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x3, 0x0, 0x1}}, 0x80) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000580)="0680324d5007a429cad400526b1c1e8a9d90ca2c0371d8b6bcf4d23a2b4584bba7dd4d83150196e5d0bc9940e8a9d8df437a19c8db01bf150a7bd815bbbab87b1e4e69e7e0d5") (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) poll(&(0x7f0000000600)=[{r4, 0x1700}, {r6, 0x98}, {r8, 0x1c0}, {r4, 0xa00a}, {r5, 0x6008}], 0x5, 0x8) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r9, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x60e4dc4d, 0x75}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x4009) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, 0x4, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x646}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x85}, 0x800) (async, rerun: 32) setsockopt$inet_tcp_int(r5, 0x6, 0x2b, &(0x7f0000000900)=0x3, 0x4) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000940)={0x0, 0xc, 0x1, [0x13]}, &(0x7f0000000980)=0xa) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000009c0)={r11, 0x1000, 0x7, 0x2}, 0x10) (async) ioctl$BTRFS_IOC_DEFRAG(r6, 0x50009402, 0x0) 3m50.698583686s ago: executing program 2 (id=192): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r3, 0x29, 0xfe, 0x53, 0x5, 0x70, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x1, 0xffff8001, 0xd01}}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x14}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000f00)={{}, 0x3, 0x858, 0x32a}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a25c91}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcff1f00000000002000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000181a0000", @ANYRES32=r7, @ANYBLOB="00000000000000005d93000000000000b503020000000000850000000c000000ce00fdff0000000095"], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc}}, 0x0, 0x0, 0x38, 0x0, "1f7b328ba0a13486643f6ce73fc7c32567369deef21dda5ae2bceedaf5ef3e8371506c292b9dba0b914db591d3d4ba3317f6373840cf5d0b413f4d562f98f4125cecb1f0f706fb0cc6902eabf1e41a97"}, 0xd8) 3m50.432900457s ago: executing program 2 (id=195): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000640)=@ethtool_link_settings={0x4c, 0x400000, 0x30, 0x9, 0x0, 0x3, 0x9, 0x1, 0xa7, 0x5, [0x1, 0x69, 0x4, 0xb9b, 0xdb4, 0x9, 0xe4f8, 0x800], [0xfff]}}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r2, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) (rerun: 32) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r4, 0xd371f000) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x9, 0x17, 0xb, 0x40, 0x42, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000001540)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf09200000000000260901000000000095000000000000002c98000000000000bd9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) (async) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r7, 0x5c2a7000) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r8, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f00000006c0)}, 0x20) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000001180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE_V2(r8, 0xc4009420, &(0x7f0000000ac0)={0x12, 0x3, {0x2, @struct={0xfffffffa, 0xc2e7}, 0x0, 0x8, 0x100000001, 0x5, 0x7, 0x2, 0x10, @usage=0x3, 0x32, 0x30000000, [0x4, 0x10, 0x58, 0x6, 0x809, 0x5]}, {0x8000, @struct={0x6, 0x2}, 0x0, 0x1, 0xf335, 0x9, 0x4, 0x4, 0x10, @struct={0x800, 0x38}, 0x4, 0xe2c1, [0x1, 0x8001, 0x4, 0x9, 0x3beb, 0xfffffffffffffff7]}, {0x8000000000000000, @usage=0x7ff, 0x0, 0x8, 0x8, 0x4, 0xe, 0xffff, 0x92, @usage=0xce, 0x1, 0x800, [0x1, 0x6, 0xfffffffffffffffc, 0x9, 0x1, 0xfffffffffffffff6]}, {0x3, 0x2, 0x8681}}) (rerun: 32) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r9, 0x5000943f, &(0x7f0000002380)={{r9}, r10, 0xa, @unused=[0x9, 0x8, 0x0, 0x5], @devid=r11}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001b00)={{r5}, r10, 0x4, @inherit={0x68, &(0x7f00000000c0)={0x1, 0x4, 0x3, 0x5, {0x10, 0x8, 0x4, 0x5, 0x6493ee49}, [0x6, 0x8, 0x8dc, 0x9]}}, @name="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"}) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x115bb575}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x367d5440}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x2f4, 0x8, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x144, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x7c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x6c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8000000000000000}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_USERDATA={0xf9, 0x7, 0x1, 0x0, "113a1888164b0fa109f51b042464f8881240b2d2ed12238716f70a2487b5a1820602a74824933f922fb02c7d45362cbc1881df3eb70de35f20006c0288619250f193acda8bb51cda1fc08d6d1abfd4688eb1e4fe6cfb910c501b2f48b4f264936cf678a37395631525024c8c8653b51dfd76cb03e930831381c5cb50b3f0df9984db86dc3572b9a171f2894968159d28ead5f916f9e5d9fa6b98e71c93066022596bf13c9de94c9d3ee4b8ab09319ac1ff890f79361a231f249cb4f93226fe00e2e2fb00ff111e70adca4d40d3b75e0900bb7b2e4b2e1ed744cc7c99f0725d785dc4836b005fe0e40516479c0719c2f21d11299adc"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8884}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5e}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}]}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3d0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3m49.453341346s ago: executing program 2 (id=207): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0xa838, 0xfff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000180), &(0x7f0000000200), 0x8}, 0x20) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0xd1, 0xf3, 0x2e, 0x0, @mcast2, @mcast1, 0x1, 0x8, 0xf, 0x6}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000090ecf9f2cf86db020000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0x8, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x80000}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) shutdown(0xffffffffffffffff, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f00000000c0), 0x0) 3m48.90025675s ago: executing program 2 (id=209): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xa, 0x4, 0x8, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200001c00000007020000f8ffffffb703000008000000b704000000000000850000000100000095996785cdbf65bc8c719266708f3612e31c03e8e696ca4180fec66a2e1257d7436d2fa6c5dd419532f6afe846ccc7e073e0aeddbfdbd3752b42cf4411915ff6d0a4e7514fb4b0dfb2988b8a73a2445ddbaee7baca3e8202dc72c22abc969d1ae282cddb988d6b262461d45d8c09a15586cb3288e134ff746571327b87859f5e8c7de918a6954bff28852833e5a5f2760577c43fca434dbd8368139744d96363858ffe00040ca0b86056371156f40a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) sendto(r1, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080005000000000008000500640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100037040000ff000000000300000000", @ANYRES64=r0, @ANYBLOB="8305050000000000200012800800010067726500140002800800050008000000080006000a010101"], 0x40}, 0x1, 0x0, 0x0, 0x2404004c}, 0x0) (async) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000003c0)={{}, {0x69d}, 0x102, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)="ad012b075781ca058e8d423d30436bfee01c9163cac69e2fc450eae8b8e6ddd9d6f32e2280c06c3c4d2e0771c5d449205dc42189c551fa3e48bd93", 0x3b, 0x0, &(0x7f0000000200)={0x2, 0xfd, {0x1, 0xc, 0x7e, "d5941d32162d4deb8d8afb0a81baf0dc47ab098384b269f4bcccfb2ae638ba26c6084f770d3779b4fc38e2e179b8590a9026eab796e448830027cf39580c927dc7b80770316d9e1eec300cac1b20a38aeeccbd8d3530a03b271a7cb6a2b87f0ce21794b0ade7d8bc8de2a66f80277819ef3a972760b3633aab4bd141a222", 0x72, "3fe0a05ebafcebed4b3748eb8c584894f89b684f2d7fa1d0bdb12ee68ce5e764e1b882b51b43dc5eb14022e734ab2ad6a3780be927a01ec5c2b59b0aa17576f1d0d8616d27ad1c19c67d4e7a189d0c027cc126607c572d528a8d788c7e4734f689139c4712c113da85f280b5b6fec738dce8"}, 0x97, "694df1056f9546a5a9ba53af8b08625af9e75427bb53aa740b967ed01a1e696eba8088d3a556a4c77936609eb10223ed0cbefd43d9c414d9189e0f017a760a010942401690af3d0e34b401fcb42584464560f5d9936517cb705a6d829a8d29cafc559e7c3c225aa9551e9a24f85b2dd026499c276cf3cb2f19e76af1f329758c0a9632969faadf6a12eb0545e54f9227a5d9263b242a0d"}, 0x1a0}) 3m48.735596319s ago: executing program 2 (id=212): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0xe, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000340)={r0, &(0x7f0000000040)='syzkaller1\x00', 0x300, &(0x7f00000000c0)={@_ha_fsid={[0xbb, 0xf2]}, {0x2c89, 0x9, 0x5b8b, 0xffffffffc140092a}}, 0x3, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x5}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x100, 0xff, 0xe, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fff9, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) 3m33.23106165s ago: executing program 32 (id=212): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0xe, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000340)={r0, &(0x7f0000000040)='syzkaller1\x00', 0x300, &(0x7f00000000c0)={@_ha_fsid={[0xbb, 0xf2]}, {0x2c89, 0x9, 0x5b8b, 0xffffffffc140092a}}, 0x3, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x5}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x100, 0xff, 0xe, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fff9, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) 2m31.769611335s ago: executing program 4 (id=638): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)="6797f04cdb6f2b8ff1c912acb0da67dc3bf442976fc916f5fe40c3a4bb8423c058dd95ffbb65d4a51d4b99564d9d6466da7ab0bd17e9281956c6ba7e10b7932de5be24106e3afc007cdf7620e0c61175af571e506a21f16330", 0x59}], 0x1}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async, rerun: 32) r1 = socket$inet6(0xa, 0x2, 0x3a) (rerun: 32) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0xb, @mcast2, 0xb}, 0x1c) (async, rerun: 32) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) (async) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r4, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) (async, rerun: 64) r5 = socket$igmp(0x2, 0x3, 0x2) (async) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async, rerun: 64) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 64) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x17}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x44004) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x1b, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="080100001900010000000000612afd6f00000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00008000000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000400000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000fcca0d0bb2da43bf0000000000000000000000000000000000000000000000b86b6e00000002000000000044000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff000000000000000000000000000000000000000007000000a8000000000000000c0008"], 0x108}, 0x1, 0x0, 0x0, 0x9}, 0x20000040) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10) (async) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 2m30.690743142s ago: executing program 4 (id=643): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x7, 0x12) vmsplice(r2, &(0x7f0000000400)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000300)="758dd6e2f815f227d2d505997a9d2cdf302beb1c5c6c202b32413bd3c622ac24537a3f9a619dad199c239a091b449f13b1821d68fc04483e028728fbf88567a30097682b37044bd4f19b4605381f6bd76c4772334902cd39fa41ae8882e78457831a2be4c735a06f78513b1a9ebfef918cb81ba1e57cc08a45e75a9fcc20adc3de5d8104cd369e3b892b343fae71138802cb1907f3bc828ccc15717bea1d257dd88895edfc81b3a2f5b8d0358a1792c75a7d7735339aa3342a0b0dfdb88ca766541f91ac257ee69ace8779f7ebb3612d6afd9e71e2bd212bcddf6fcfbd65d594c42e087f5c0f3946d685c06e280a6d049509f396d65a17ab0131ab46"}], 0x1000000000000389, 0x0) write(r0, &(0x7f00000002c0)="8e", 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x48, 0x2c, 0x601, 0x8, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0x6, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xfff1}}, @TCA_FW_MASK={0x8, 0x5, 0x10001}, @TCA_FW_MASK={0x8, 0x5, 0x10}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "d8359313a5fa1400", "610d3effbcec157aa6fa3c427faf8798f250c4277195b618670296709d0a3a52", "f60bc295", "95dd3016319132e3"}, 0x38) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r11, @ANYBLOB="0500060001000000050007a10000000005000300df00000008000200", @ANYRES64=r4], 0x68}}, 0x0) r13 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000013c0)=[@in={0x2, 0x4e1e, @private=0xa010102}, @in6={0xa, 0x4e21, 0x34, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r13, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001080)={r14, 0x4, 0x7}, &(0x7f00000010c0)=0x8) ioctl$XFS_IOC_FSGEOMETRY_V4(r12, 0x8070587c, &(0x7f0000000080)) sendmsg$NL80211_CMD_SET_BSS(r13, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x60, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x16}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3c}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x40}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xf5}]}, 0x60}, 0x1, 0x0, 0x0, 0x80004}, 0x8010) 2m28.936565293s ago: executing program 4 (id=651): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x208) socket$netlink(0x10, 0x3, 0xe) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r1, 0x29, 0x3e, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="07000000010003", 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)={0x1c, 0x0, 0x1, 0x4070bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004a0a0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#\x00'], 0x48) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x9, 0x9}, 0x8) r5 = accept4(r0, 0x0, 0x0, 0x80000) r6 = socket$netlink(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x2e, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r7}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair(0x1d, 0x3, 0x1, &(0x7f00000008c0)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0xe8, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0xa8, 0x4, 0x0, 0x1, [{0x94, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x84, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RANGE_FROM_DATA={0x78, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x2c, 0x1, "94fb765dcb4e0c50e15e5883576dd7211e3ef73d2bc925384a7ac1338c9ed17769a92ca7dd77f52b"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x110}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000180), 0x8) 2m26.508402401s ago: executing program 4 (id=655): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$netlink(0x10, 0x3, 0xb) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000080)=@rc={0x1f, @none}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)}, {&(0x7f0000000140)=""/251, 0xfb}, {&(0x7f0000000240)=""/150, 0x96}], 0x3, &(0x7f0000000340)=""/141, 0x8d}, 0x12100) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000440)) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000480)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x9, 0x5, 0x4, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x89, 0x10, 0x2, 0x1}}) sendto$packet(r2, &(0x7f00000004c0)="ba13d660395b74a1d168cbcf8a0b41996b5196d401746b275062dec4492523dc1b6f45a36e61625fecf762dc388a62d826c6711843fb679f414aece73e8083d4b8a85223984cfeeea1e52a63787272f98754d864", 0x54, 0x24004000, &(0x7f0000000600)={0x11, 0x1c, r3, 0x1, 0x7, 0x6, @remote}, 0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000007c0)={r4, 0xdc, &(0x7f00000006c0)=[@in6={0xa, 0x4e20, 0xaf2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e22, 0xf31, @remote, 0x400}, @in6={0xa, 0x4e22, 0xd63, @local, 0x10}, @in6={0xa, 0x4e21, 0x0, @private1, 0x4}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e22, 0x19b9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}, @in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f0000000800)=0x10) connect(r1, &(0x7f0000000840)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x4, 0x5a, 0x0, "cbb45a1009efdbe306e6d46fca64ef8ba594ccd7874b08aa2c5fab020031c025c79199c1850aaa7bf58989ac5a786ffef86437df54108814bb9f2c3e34625e", 0x2f}, 0x80) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000940)={0x0, @multicast2}, &(0x7f0000000980)=0xc) sendto$packet(r2, &(0x7f00000008c0)="329ac5fc8ef5c9b1fccd0ac1cb1870545d82809cae58a36a82dbb9c21be108d0e0dfec62a597ed211e4f971ede446004a6fc1e551a26b4530ca212b2d4fc859490f9", 0x42, 0x4040, &(0x7f00000009c0)={0x11, 0x0, r5, 0x1, 0xc8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000a00)=""/233, &(0x7f0000000b00)=0xe9) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x80, 0x0) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000b80)=0x1) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @private, @dev}, &(0x7f0000000c00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000c80)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000d80)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000e40)={'syztnl2\x00', &(0x7f0000000dc0)={'ip6gre0\x00', r5, 0x2f, 0xd, 0x4, 0x9, 0x23, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x40, 0x8, 0x4}}) sendmsg$nl_xfrm(r1, &(0x7f0000001000)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2408}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e80)=@newpolicy={0x114, 0x13, 0x8, 0x70bd29, 0x25dfdbfc, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x100, 0x21, r3, r8}, {0x2f099174, 0x9, 0x8, 0x8, 0x4, 0xffffffff, 0x61, 0x6e}, {0x6, 0x5, 0x3, 0x5}, 0x9, 0x6e6bc0, 0x1, 0x1, 0x1, 0x3}, [@offload={0xc, 0x1c, {r9, 0x1}}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd29, 0x70bd28, 0x70bd29, 0x70bd25, 0x1, [0x6, 0x7f, 0xbbe, 0x4, 0x465, 0x8, 0x4]}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @policy_type={0xa}, @iptfs_dont_frag={0x4}]}, 0x114}, 0x1, 0x0, 0x0, 0x811}, 0x20008080) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000002140)={{r0, &(0x7f0000001040)='\x00', 0x20000, &(0x7f0000001080)={@_ha_fsid={[0x8]}, {0x4f3, 0x9, 0x2, 0xfffffffffffffff8}}, 0x8a, &(0x7f00000010c0)={@_ha_fsid}, &(0x7f0000001100)=0x1}, {[0x1, 0x81, 0x8, 0x1]}, 0x7, 0x1000, &(0x7f0000001140)=""/4096}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r10, 0x84, 0x4, &(0x7f00000021c0), &(0x7f0000002200)=0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000002240)={r4, 0x9, 0xfff, 0x30f5, 0xffffffff, 0x5}, &(0x7f0000002280)=0x14) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002300)=@generic={&(0x7f00000022c0)='./file0\x00', 0x0, 0x18}, 0x18) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$nci(r11, &(0x7f0000002380)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x1, @f={0x4, 0x2, 0x2, 0x6, {0x5, 0xee, "63e9c297a9e0666c416bd6e651756a10e8153ca73f19a56201f777755a1f73a25d54e92cfa16769809c8c7c47e2630c9b9bc018ec3463c479664cfb1b51e94fb28becfe74f76741106121c471b3b89e5408b934434b001e950c611d1c158f8cf0fcc0d36fd313121cb2f4c2b83c443e32b87ab8220d68a3fc1c31631d288b96ceba2b73526249d2e132a807bb94f4db476db41e24b9f7d0a6d68195dd3ad48d0a9981bc5043dd45ff47055fea6693ad30e0e5b3e35efbd522250fd3b4094ebf335efdcf720069024e663aa026cd4c83e0bd11eed132c80d2dd734c2bd08b863b93a84e64d9b7850fa464e6c59e4a"}, 0x2}}, 0xf8) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r12, 0x8982, &(0x7f0000002480)) 2m25.46558928s ago: executing program 4 (id=667): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x12, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000280)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r3) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000340)=0x2) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x4c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c085}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x148, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x192a}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb2e}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x72c22ff}]}, 0x148}, 0x1, 0x0, 0x0, 0x48880}, 0x50) 2m25.170041332s ago: executing program 4 (id=670): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0x0, 0x0, 0xa1}, 0xfec3) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000080)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x1000000000000105) (async) sendmsg(r1, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=ANY=[], 0x248}, 0x20008044) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ffffffff00006a1724ef456949140001f0ffffff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x19}, 0x94) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0xb0000000}, 0xd, 0xb, 0x4, 0x1, 0x5, 'syz0\x00', "96d4fd6246bdc42b7f9e10dab6626b776b7002b182016800", "69d30d8077e63b207fb7d8c959cf6e019f203869fa621d1434d98a0100534173", [{0x4, 0x1, {0x2, 0x565}}, {0xfffa, 0x2, {0x0, 0x6}}, {0xc, 0x1, {0x3, 0x76f0}}, {0x6, 0x6, {0x3, 0x1}}, {0x0, 0x6, {0x0, 0xfffffff6}}, {0x7b84, 0x8, {0x3, 0x1}}, {0x6, 0x0, {0x2, 0xc46}}, {0x66af, 0xe, {0x1, 0x4}}, {0x2, 0x9, {0x0, 0x20}}, {0x0, 0x4, {0x3, 0x6}}, {0x402, 0x0, {0x2, 0x10}}, {0x401, 0x5, {0x2, 0xf8d7}}, {0x3bc, 0xc, {0x1, 0x6}}, {0x23b, 0x2, {0x2, 0x4}}, {0x810, 0x8, {0x2, 0x6}}, {0x7, 0x7fff, {0x3, 0x6}}, {0x7, 0x1, {0x1, 0x9}}, {0x9, 0x7fff, {0x2, 0x2}}, {0x80, 0x8000, {0x3, 0x7}}, {0xfdc3, 0x400, {0x2, 0x6}}, {0xff7f, 0xd3, {0x1, 0xc3e2}}, {0x3, 0xcc, {0x3, 0x4}}, {0x10c4, 0x6, {0x1, 0x100}}, {0x0, 0xcddd, {0x0, 0xffffb383}}, {0xf, 0xfff7, {0x2, 0x7fffffff}}, {0x2, 0xfffb, {0x2, 0x7ff}}, {0xc9, 0x0, {0x0, 0x9}}, {0x8, 0x4, {0x2, 0x1ff}}, {0x3, 0x6e9, {0x2, 0x3}}, {0x6, 0x1, {0x2, 0x9fa5}}, {0x824b, 0x5, {0x0, 0x9}}, {0x200, 0x5, {0x3, 0x8}}, {0x9, 0x5, {0x2}}, {0x8, 0xb7c5, {0x3, 0x8a52}}, {0x28, 0xdfe4, {0x2, 0x8}}, {0x1ff, 0x9, {0x2, 0xfffffffe}}, {0xf918, 0x5, {0x3, 0xfffffffe}}, {0x6, 0xc62a, {0x1, 0x2}}, {0xffff, 0x7ff, {0x2, 0x1}}, {0x2, 0x2, {0x1, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) (async) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@mcast1, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) (async) r6 = socket(0x200000000000011, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) (async) bind$packet(r6, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x1410, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4890}, 0x800) (async) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001600010a00000000000000000a0000ab"], 0x18}}, 0x8000) 2m10.076092611s ago: executing program 33 (id=670): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0x0, 0x0, 0xa1}, 0xfec3) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000080)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x1000000000000105) (async) sendmsg(r1, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=ANY=[], 0x248}, 0x20008044) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ffffffff00006a1724ef456949140001f0ffffff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x19}, 0x94) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0xb0000000}, 0xd, 0xb, 0x4, 0x1, 0x5, 'syz0\x00', "96d4fd6246bdc42b7f9e10dab6626b776b7002b182016800", "69d30d8077e63b207fb7d8c959cf6e019f203869fa621d1434d98a0100534173", [{0x4, 0x1, {0x2, 0x565}}, {0xfffa, 0x2, {0x0, 0x6}}, {0xc, 0x1, {0x3, 0x76f0}}, {0x6, 0x6, {0x3, 0x1}}, {0x0, 0x6, {0x0, 0xfffffff6}}, {0x7b84, 0x8, {0x3, 0x1}}, {0x6, 0x0, {0x2, 0xc46}}, {0x66af, 0xe, {0x1, 0x4}}, {0x2, 0x9, {0x0, 0x20}}, {0x0, 0x4, {0x3, 0x6}}, {0x402, 0x0, {0x2, 0x10}}, {0x401, 0x5, {0x2, 0xf8d7}}, {0x3bc, 0xc, {0x1, 0x6}}, {0x23b, 0x2, {0x2, 0x4}}, {0x810, 0x8, {0x2, 0x6}}, {0x7, 0x7fff, {0x3, 0x6}}, {0x7, 0x1, {0x1, 0x9}}, {0x9, 0x7fff, {0x2, 0x2}}, {0x80, 0x8000, {0x3, 0x7}}, {0xfdc3, 0x400, {0x2, 0x6}}, {0xff7f, 0xd3, {0x1, 0xc3e2}}, {0x3, 0xcc, {0x3, 0x4}}, {0x10c4, 0x6, {0x1, 0x100}}, {0x0, 0xcddd, {0x0, 0xffffb383}}, {0xf, 0xfff7, {0x2, 0x7fffffff}}, {0x2, 0xfffb, {0x2, 0x7ff}}, {0xc9, 0x0, {0x0, 0x9}}, {0x8, 0x4, {0x2, 0x1ff}}, {0x3, 0x6e9, {0x2, 0x3}}, {0x6, 0x1, {0x2, 0x9fa5}}, {0x824b, 0x5, {0x0, 0x9}}, {0x200, 0x5, {0x3, 0x8}}, {0x9, 0x5, {0x2}}, {0x8, 0xb7c5, {0x3, 0x8a52}}, {0x28, 0xdfe4, {0x2, 0x8}}, {0x1ff, 0x9, {0x2, 0xfffffffe}}, {0xf918, 0x5, {0x3, 0xfffffffe}}, {0x6, 0xc62a, {0x1, 0x2}}, {0xffff, 0x7ff, {0x2, 0x1}}, {0x2, 0x2, {0x1, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) (async) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@mcast1, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) (async) r6 = socket(0x200000000000011, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) (async) bind$packet(r6, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x1410, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4890}, 0x800) (async) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001600010a00000000000000000a0000ab"], 0x18}}, 0x8000) 8.145344844s ago: executing program 0 (id=1724): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0x0, 0xfffffffffffffc43, &(0x7f0000000500)="e0b9e03436bf5bfc5c4277fc000000005dd399373167fb2dc70c5ef9cc60e8a3b765bef5162a36c825840954acfcd55fd35a5eda11fa8b5d118bee32510631de13c1ff1bd34c9ceb14faafdf4692c61035281e4c138786a1a485e438cf3598ef4182a2ba0e6a05e576fb83061b000000000000000000", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xdf}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000380)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000300)=r2, 0x4) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="04000000ffffffffffffa2aaaaaaaaaa86dd60b79a56004c29"], 0x86) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300031000000000000000000000000200090008000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000000000000000000000000000000002000100000000fffffffb160000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000001000a010800000000000000010200000009000900000000000000000048000000090a010400000000000000000200000008000a40000000010900020073797a3100000000097ddcffc9ff2f0ea7d39b329400010073797a300000000008000540000000080c193e838f0001410000008e440000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001000000000000000000140000001100010000000000000000000200000a"], 0xd4}}, 0x0) 7.232315677s ago: executing program 0 (id=1733): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000003c80)=ANY=[], 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003}, 0x18) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbff}, 0x206c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c801) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000080)={0x4, 0x8, "974147", 0x7, 0x2}) socket(0x1, 0x5, 0x0) 6.311989738s ago: executing program 1 (id=1740): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x5, 0x0, @void}, 0x10) close(0x4) close(r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) 6.087268293s ago: executing program 1 (id=1743): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000070060000000000000900000073112c000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local}) pread64(r1, &(0x7f0000002200)=""/89, 0x59, 0x10000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000200)=0x1) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe0, 0xe}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={r9, 0xa010}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r10, 0x6, 0x1}, &(0x7f0000000100)=0xc) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000014c0)=@newtclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) 5.939665611s ago: executing program 0 (id=1744): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x4c}, @val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x8808) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x1f, 0x2, 0x100100, 0xcb98, 0xc, "33e4a8", 0x6}}) 5.752794659s ago: executing program 0 (id=1747): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000114000000110001"], 0xb0}}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000180)={{0x2b, @remote, 0x4e21, 0x2, 'nq\x00', 0x0, 0x100004d2, 0x30}, {@multicast2, 0x4e22, 0x2, 0x4, 0xd3, 0x6}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="5cf0b67aa16bf1dcc2f1ae5aa14e42cb6db77c270b99b1c640ab27453b4a089d9ad367f0f0dd7ab38ddbaeb047ef74d0a1f9aa080b894ea2f067824e2331f63e32eca6dd1196239a33e3ff58a8c40a9c120cca1666ab88492ec25f2ee144dc6b0d2e21651eea22bd79d45e406676df1e1ae9f937ff483c77a3c16a52c736c022b2829500081c0d6159780f114f713eb8364ba6d5b6c9f64f43326bc2219741e92de26f4342bcc6d691ff5f36c990af86750adc5b945e27ee8d6b65cd12841c9b110bad0f2c9a2d2e73410f0cb58d43c433459b820ed4314723626946aa6697e045c1edce001ffe549ae2a44b4377da7d4f3d2857e45c3f25ea44797577256b587f7420a30745a6e373c058200d42edc02b42d028e4cab8d6fe09d677ccd453784f3deb8724be00842dc857e2efe2a752a32b3dcd252d6ccb6ede45cfab2830c0b5947a4b9c9f68705d9e669d8f1e6d60a32812825252a46beadd87ecc1344c9924cffb26c2effcf25244b1f7b717b0e4b3f30b8c136b2385aeb52364d199e97c455117c390d3d3f0524bb4159b15a1803be4d289ee4524a36d70a47f56b1dcb865c40452f9851860601d929a4237c3ff9522ce238fb12761a11b0eeffa5156d5f8f8e8782dd61e291cd691dfebf673c04622ab3d0f41386eaa02f05a9d4f0b83c796ba1a3115ce0132030cd11f4cc797a20e5388ca45936c27282f7c28ae8312654c9f34b28f1c59894449dcc1c993929cff02280f7688100ac4ccba6e534cd44e6cefa6cf2c64fa66f8e3d59b0b851fbbdbbe81d57c44a5eee6a7d96ca176ad33240a703cff52de4fd70ea2d4330f4efc17c55aa688ed5daa1646e50ffc07c95059a2b3ee442f665c9838293b0400b951a1f706bf73b63d9d7a8aed42c0b54bb81be4fc698e1eb0605d656a5446698b76ef5a224cde75c457d49ad7479153d36ce1c2e32011e058866cc94d44604eefc42fdb6bfd82cf4722bf4c73df1ea2d02eb787ec0eb26ea13532a77465da7070bff12fe8c1694ec2eb87285915ab182543db23b45a1ca291e7b9133fccdc0742ce6e6b71e3286412339dc52d696136f47912519545911c246c875ff80dd734f81c41a73493da7da9c4ee125c60dd65a49d490e2fc33ca5fc511ad18148b1177f19eaeffe7a0174875dd03e8e3b32ebcae0a8aabea0d4d1de879332ea50471fc6eb5b7cefcc7b243c22c84d85c73f8c8fc31cbbcd9f4c6b601e02375428fdbd320c2182877da71a2d70330f05fd8e7c50f73c291bc4bff8e306f55c79cfea125876f6e9092ad5598d8fa62d119385061f1ff13bf7c2b44fd363be7229f6b4f2f6fb7f641535c47cca350e598b8290fa73bfc0559e5bfa74228bd4b7048b8f0356c43a439b5731381d575997780e4f57b5c2d6b5bfbb955aa10e9f9cc46eb62b530a156511fa7e0c001f24396af1a9946d07d3c065f7fb88c430c63807652c60cb174735e1466df3bd407a765a4a63ad2cf004bad50ab2049a7f56cdfd53d39eabc749871e70fbab4ffe42756ed05335df15d40420134902a68b69a15dda03c98ed9333174043441f807b70f5a98d35984128a902e7ee8d5ae806ca40e4f5ad2288ec645ca43275c7625eabda5a774d10c9efcc852b4e2a181255308ab1082ad382bb5bdff980865e7caadcec81b4697457d816625097cb4a9659d480145a3d40237e54be17faf12fae9a9a48226fd7e43509e325359642bd8626e37958f83494b15b6c615121238129c15c1fac440dabc71a836ac2976e1987abdc3ecbe78dacda51cf9019e3159b276a877e355c18a9835cdf98522dad7467dcbd97dca4098599ce33ebee7c742ab847d39172608fd8f829e344393b50f29f0e7efdc35bad46c1e20ed7c3f5874f021a8afe3a96cf9e186eafee13b138d92091282414ad896034d8146e849785b364450970abe11f743a12ac977062059ad7f67b01d32cdcc75c6babe2309fc929a9d92c805ecb4ff70719df50807e824ae90f66b0557bff4ebf78dfa43532869ff5164e144defc4d8ee1d6745ed369e7ed7afc981f0f3a0c82a1f97032a12eb8d672b2231040d132971ff2b2ea2eeb0f30fc21fdcd80e32f8a64d325b0fa74919c0b727335230cd340883ed28bd50af63e07f98f91e5d69851b25ab260828303713fa7ce5671c598fabee013bbb6ed04bc70e8d16d9748b885179ae22e4a9ea40d55d6565b0dc5b35719f28199b95ce9ce7f3c81c5a62a5ec1c9c63a8c74cbd26682875ffd2b8c709643d4dfa81199f9828fbe6c1e99d5c003f7ebfbf860fb238f1e427c74eadf459ed60ee73de4d13c8cfc7c58fc371fdd0e8bd70b10e4f9de9928f5c1fa81dffabc7a818fc8d50d9611f06b901bd88a5fc6b9f8bc6503b23822f105653b598c9f0abffbae0d8c56cff568f2c2bc47a88b26c2124a78921462efa4895730f369bf1f0d3227ef1b76dd394317c1726a13f9c15d65bcf6128b61351abac6a54151efcd872d25d9929cf5b7ef141e84b8d145fff6453d6a943af1c0ebd6c2aad77c1cadd21880bcdc362c690e88a914f946c8cfe00ac1936ac8e7ee66156bf76a158b09244aee3c937677067b8d6ce6de5711c80ee00893acf16e86e44037450581e6d06aff72630356644d2345741e76065a15b23cd57ed96a4b702b07a1c2df236ef5d1f0711ed23742a05bf7c047b48338e28115cdce04277cc10936937f0434ae60adbf1a9fc6f422ce8017d1f7b5554c19dc67fdce214afdb8b9a04e3987d16ce5b0b8d9f779914441357347af13f08fec8b05e4f786e88d1346fffd81cd3feb2c518c8a5199ebc2e15754a789febfde86dacb5530ebad117acc0b1cad2669836b5e536dc3df3739f22b85bf1d64353ce65b81707902fc9b471bd159fc80065f26d56aa310d47c276bbd83f5d2e5e4ffbe0e424b21eb940d9e1b3198eae52cdde8c193f4f07e7af9e40f64e2ebdb9aa0f0dc49fae9b024128379eec28ff2b2989907e16bdd9ea22f767f73d21c1c9ed2992b1c5ff5e606c7a3f5f29ce6e30e0118f5c6f88c6bdd27bc58fc74390a97a98590b31fbcbd76449777b253ce0c68da51d402ae862beef5fbfd8afb3aaa62f57826e74c8f6b985aa456e015fd8325eb8fedbc0f0e681bcd8d7626bee70e48d563d1acb03af39d206384b1e8328e588e66fb7243c8c9c2748a8f9efb34a0ab4e76035d9c6e4a7784ead7194f2868f97c580769942b3e81bf02e55c27f43885303d641ab9717618592bf790c119a9033ffce20a8ffcd0d1f1043add8da1a40b2d223920e33625366ccbf515b4e83ba5030df036316798c8cd50b5dca303fddfed3b4d7e89077be0af139ed509243dca68271d02238c85a6dc019897727b6137b18fdf444cff1790631b4c411daa9939b4a4b1abd93b2b1370d62c9e07962cacdde123b75a625553cc8dd2c4f4df4f96a1cdd07fefb232347dbf24e39831251d30e931dc965b789975d93c35d001bb90335f77984b4fe6cfe67eeacbfe8b03dd3b9eccc33ae979b38bf89417e89e0b7c3da65443cb8371353e7b5a44f99db5c73a0f7bc84147ef45847dc0231e00684f0bfb361efc62636c460501a910047db41258c00538b6763b3a79a23395afc6a46be1f53d123202bb598f9e3f40d50939f0cb01c70215e55de53703375e5be090387eaec3717d22e718c31f9d9eb2a81a2bddd846671d14aa42995cd18aca6c804b4b8eba42693eb4d2db995ef26e5a7ab1c4a98d7c268821edf7d2f193f381c15e87fa8355207c3efb209e4214038e99f7c3e7fdcdc4d038b18b08c488edc20a949f7417a7d8dd4e37dbf1b4afcf79ef867d17ca68a0d744b8f6aee7738be4beb737ca9dba34fda810f44c0f51ec9f8e295e7cd78e3256ae73db7186b1e29a04f63065c44fa6c7a16fe4f50851f336b402ce5a73ff88f9b5cdb52ead12060590180f112a4f6c36e5418207bc5dc8635ec831e383ae67fbbe119de517a6932a69440015d014a1d143c8b09f611aa4f79b083c8ea67806cf221ede408771cf2d979feb3e448fcbd859e875d6ff6cff062e073bdb4b32bcf5", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff00000000000000020000000002000000000000080200000000005f00"], 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000100"/28], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r6, r7, 0x25, 0x1d, @void}, 0x1a) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r7, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r8, 0x0, 0x0}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x4b, &(0x7f0000000100)=0x5, 0x4) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$netlink(r9, &(0x7f0000000040), 0x44081) 5.336942438s ago: executing program 0 (id=1749): unshare(0x6a040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x1, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x200, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a1", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x1, 0x800, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRES64=r5, @ANYRES32=r7], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000700000000000000030000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x48001) socket$pppl2tp(0x18, 0x1, 0x1) 4.805043294s ago: executing program 1 (id=1752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000008"], 0x14}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1539a, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000500)=[{0x1ceb, 0x5, 0xe, 0x6}, {0x0, 0x4, 0x3, 0x5}, {0x3, 0x3, 0x5, 0x5}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x80, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x482d, 0x4, 0x486f, 0x8, 0x5, 0x30, 0xc]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000040) 4.301699616s ago: executing program 3 (id=1753): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x6, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "715150b1971bbe75", "8c419c4cb217d59a5e2108c76ca18dad", "8869fdbb", "ddc7586e28e54682"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x34, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0xf, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000400)={&(0x7f0000000240)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x2, &(0x7f0000000340)=[{&(0x7f0000000280)='+', 0x1}, {&(0x7f00000002c0)="030e13e4b6b414de6dfabb5af039db152f8a96bb2f30a50ec35d7113773e2cd6d63b937bc406a9d58fa77b69152db754b5f96045a13fce721313534870639c3f87a8a9fec2dd3590c42df7c1d0545bcccdcc84d29a6fb442d8edc74d6d3301d2d233b4260f6555494f1998ebe505a62b80ee29bf05"}], 0x1, &(0x7f0000000100)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x3, 0xffff7ffe, 0xff}}, @init={0x18, 0x84, 0x0, {0x7, 0x1001, 0xff, 0x4}}], 0x38, 0x4014}, 0xc0408c4) listen(r1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r6 = accept(r1, 0x0, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="e5", 0x1}], 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f00000001c0), &(0x7f00000002c0)=@tcp6=r6}, 0x20) r8 = socket$kcm(0xa, 0x1, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000ffffffff0500"/20, @ANYRES32=r8], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8916, &(0x7f0000000000)={r9}) r10 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8916, &(0x7f0000000000)={r10}) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8936, &(0x7f0000000000)={r11}) recvmmsg$unix(r6, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/29, 0x1d}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10040, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x50, 0x8, 0x7, 0x12, 0xc7, 0x40, 0x4, 0x8, 0x7f, 0xfd, [0x9, 0x3f, 0x5, 0x0, 0xc28, 0x80000000, 0x7, 0x4]}}) 4.282522488s ago: executing program 6 (id=1755): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRESOCT=0x0], 0x10}}, 0x22008040) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@enum={0x8, 0x1, 0x0, 0x6, 0x4, [{0xe, 0x9}]}, @float={0xf, 0x0, 0x0, 0x10, 0x4}, @const={0x7, 0x0, 0x0, 0xa, 0x2}, @float={0x1, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x30, 0x2e, 0x30, 0x30]}}, &(0x7f0000000400)=""/182, 0x56, 0xb6, 0x1, 0x7ff, 0x10000}, 0x28) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r5}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@jmp={0x5, 0x1, 0xc, 0x0, 0x9, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000040)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x3, '\x00', r5, 0x0, r3}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)='\tJ', 0x2, 0x30040011, &(0x7f0000000200)={0x11, 0x8100, r7, 0x1, 0x4, 0x6, @multicast}, 0x14) 4.014906851s ago: executing program 5 (id=1756): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0xe51, 0x0, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r2, 0x1, 0x3, 0x6, @remote}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="f5af24bd7000000000", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x80010, r6, 0x1000) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r7, &(0x7f00000002c0), 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16ba499daf396cce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000001000000a00300000200000000", @ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x1800, r8}, 0x38) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001200)={0x0}}, 0x18840) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r8, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYRES8=r7, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="ff02000000000e0000000000000000030000000000000000ac1414bb00000000200000000000000000000000000000000900000000132d0be6b2d6b2029fd0bae2b460c4000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff020000000000007cf80000000000000000000000e8d2fff88d0e0385b46bca000000001f00000000000000ff0100000000000002000000fcffffff400002002abd70df033500000a0001fd2000", @ANYRESDEC=r5, @ANYRES16=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x8801}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x20, &(0x7f0000000800)={&(0x7f00000006c0)=""/62, 0x3e, 0x0, &(0x7f0000000700)=""/204, 0xcc}}, 0x10) (async) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x5, &(0x7f0000000880)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x6}, @generic={0x6, 0x1, 0x5, 0x1, 0x4}], &(0x7f00000008c0)='syzkaller\x00', 0x8, 0xaa, &(0x7f0000000a40)=""/170, 0x41100, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1ad38, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x5}, 0x94) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x1e, 0x9, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa}, [@ldst={0x2, 0x1, 0x4, 0xb, 0x2, 0x8, 0x4}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @ldst={0x1, 0x1, 0x6, 0x7, 0x6}]}, &(0x7f0000000540)='GPL\x00', 0x80000000, 0x8e, &(0x7f0000000580)=""/142, 0x41100, 0x0, '\x00', r2, @fallback=0x2c, r6, 0x8, &(0x7f0000000640)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x9, 0x3, 0x1}, 0x10, r9, r10, 0x9, &(0x7f0000001cc0)=[r11], &(0x7f0000001d00)=[{0x1, 0x1, 0x3, 0xc}, {0x4, 0x3, 0x0, 0xa}, {0x2, 0x3, 0x3, 0x9}, {0x1, 0x1, 0x2, 0x7}, {0x0, 0x2, 0xe, 0x3}, {0x3, 0x3, 0xf, 0x3}, {0x3, 0x2, 0x2, 0x9}, {0x3, 0x3, 0xc, 0x1}, {0x2, 0x5, 0xf, 0xb}], 0x10, 0x1}, 0x94) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='(\x00', 0x100, &(0x7f0000000080)={@align=0x6, {0xda, 0x7, 0x9, 0x56a0}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4}) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000001e80)=ANY=[@ANYBLOB="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", @ANYRES16=r13, @ANYBLOB="04002dbd7000ffdbdf2567000000080001003a0000000c0099009d97185e090000000800c400090000000800c300040000000800c300010000000800c400030000000800c300090000000800c4006f0c00007500c5006486aa953afe764bd2725699e6b29bcd8830a664e551936434762e652195b03a215b1e67154ae1779c24e75ca2cda1462cec42f67e03595a73f851a19a2ec8440b052f629208bed908dba0a45396361544d7057630ba9d68a1b8ae60355f459370a97ff414dae547d87d85fc5dfb24f0e50000000800c300f9ffffff"], 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x8884) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x1b, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000408000000000000000000e018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000b000000850000000600000018010000756c6c2500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300008085000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xa, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0xc}, 0x94) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0xc5c}, 0x8) 3.900175838s ago: executing program 6 (id=1757): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x98, 0x0, 0x0, 0xffffffff, 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1, 0x2) r2 = socket$kcm(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getuid() r5 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0600000004000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="920e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000008000"/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000011ec0)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0x800}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r5}, 0xc) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x170}, 0x1, 0x0, 0x0, 0x4040895}, 0x20040010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="448a6b87932d25a1bcfc954300000010000003fe", @ANYRES32=0x0, @ANYBLOB="00400000003f00001c0012800b00010067726574617000000c00028008000700ac1414220800040000100000"], 0x81}}, 0x4000) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r9, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r10, &(0x7f0000000340), 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=r11], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000900000000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r14, 0x0, 0x0}, 0x10) 3.498734894s ago: executing program 6 (id=1758): socket$xdp(0x2c, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket(0x2, 0x80805, 0x0) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000540)={0x4bc, 0x0, 0x5, 0x51d374b4827e57a4, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x1000}, 0xa9, 0x3, 0x8000, 0x3, 0x1, 'syz1\x00', "e8ed713685170c859bb11fa3e481e15547aeac12f466dcc78f094383f16e6e5b", "e0c7c2f38d4a3d71ed76fed893c2e8f3e545d5f585adbe178b35d7280ac48da9", [{0x3, 0x5, {0x0, 0x1}}, {0x8, 0x200, {0x3, 0xffff}}, {0x81, 0x1fce, {0x2, 0x1000}}, {0x9, 0x4, {0x2, 0x9}}, {0x0, 0x0, {0x2, 0xffff}}, {0x2fd, 0x4, {0x2, 0x2}}, {0xfe00, 0x1, {0x1, 0xffff3aec}}, {0xc832, 0x4, {0x3, 0x7}}, {0x7, 0x2, {0x2, 0xfffffffb}}, {0x0, 0x0, {0x2, 0x86a0}}, {0x0, 0x401, {0x1, 0x4}}, {0xbbd, 0x200, {0x2, 0x7}}, {0x48, 0x3, {0x2, 0x5}}, {0xfffe, 0x3ff, {0x0, 0x3}}, {0x0, 0x9, {0x3, 0x9}}, {0xc, 0x6, {0x2, 0x7}}, {0x84, 0x25c, {0x0, 0x9}}, {0x8, 0x200, {0x0, 0x1}}, {0xf, 0x5, {0x0, 0x3}}, {0x7, 0x7, {0x3, 0x7}}, {0x4, 0x3507, {0x2, 0x6b}}, {0xffff, 0xe, {0x78897aaea8f74a19, 0xc7f}}, {0x0, 0x3280, {0x2, 0xfc}}, {0x7, 0x4, {0x3, 0x8832}}, {0x9, 0x1, {0x1ccf1a6c47903173, 0x101}}, {0xffff, 0x8, {0x0, 0x80000000}}, {0xffff, 0x6, {0x0, 0x8000}}, {0x8, 0xfff8, {0x0, 0x1}}, {0x4, 0xd96, {0x3, 0x7}}, {0x8, 0xac, {0x3, 0x9}}, {0x8, 0xa, {0x1, 0x9}}, {0x4, 0x8, {0x0, 0x5620}}, {0x100, 0xb, {0x1, 0x4}}, {0x73e, 0xce, {0x2, 0x8}}, {0xc, 0x2, {0x1, 0x5}}, {0x8000, 0x6, {0x2, 0x6}}, {0x2, 0x0, {0x2, 0x8}}, {0x6fd2, 0x1000, {0x2, 0x8}}, {0x9, 0x8, {0x2, 0x8}}, {0x9, 0x4c00, {0x2}}]}}}, {{0x254, 0x1, {{0x0, 0xa64}, 0x9, 0xa, 0x7f, 0x2, 0xf, 'syz1\x00', "56d4bf59d18af2f30927c7789c6f5c92e7cfa5b18fbdd61b3fe6c988854eb43b", "313f7c6ff04bf30bad33ddf945e5ee0cf8d227512a7193bfa561d7248560e1e6", [{0x1, 0x4, {0x2, 0x43fb}}, {0x7, 0x5, {0x0, 0x2}}, {0x8, 0x1000, {0x3}}, {0x800, 0x0, {0x2, 0x2}}, {0x0, 0xc, {0x2, 0x1d}}, {0x0, 0x6, {0x2, 0x3}}, {0x4, 0x4, {0x0, 0xfffffffe}}, {0x9, 0x3, {0x3, 0x78e}}, {0x2, 0x1, {0x1, 0x9}}, {0x7f, 0x6, {0x1, 0x81}}, {0x4, 0x6, {0x2, 0x6}}, {0x401, 0x2, {0x1, 0x10}}, {0x8, 0xd93, {0x3, 0x2}}, {0x3, 0xfff8, {0x2}}, {0xcbb7, 0x8, {0x2, 0x1a89acc5}}, {0xd, 0x0, {0x3, 0x100}}, {0x8, 0x8, {0x0, 0x5fb}}, {0x8, 0x2, {0x2, 0x4}}, {0x3ff, 0x7, {0x1, 0x2}}, {0x3, 0x468, {0x2, 0x6}}, {0x1, 0xd, {0x3, 0xe}}, {0x3, 0x5, {0x0, 0x2}}, {0x5, 0x3ff, {0x2}}, {0x19, 0x4, {0x3, 0x1}}, {0xf, 0xff, {0x0, 0x2}}, {0x3, 0xf, {0x3}}, {0x6, 0x7, {0x0, 0x4}}, {0x8, 0x7eac, {0x3, 0xfffffffd}}, {0x4, 0x8001, {0x1, 0x8d3}}, {0xfff8, 0x1000, {0x0, 0x7}}, {0x6, 0x3, {0x2, 0x3}}, {0x4, 0x3, {0x0, 0x7}}, {0x10, 0x1, {0x0, 0xdd34}}, {0x3, 0x3, {0x3, 0x40}}, {0x1ff, 0x2b, {0x0, 0x6}}, {0x8000, 0x6, {0x0, 0x6}}, {0x216, 0x7, {0x2, 0x135}}, {0xee85, 0x3ff, {0x2}}, {0x8, 0x0, {0x2, 0x7fff}}, {0x9, 0x2, {0x2, 0x7}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x844}, 0x40001) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x8810) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="bb62bc5d78da000000000000800168756765746c6220"], 0x9) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) 3.414983218s ago: executing program 3 (id=1759): socket(0x10, 0x803, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x1}, 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0xc094) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000100", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="080005000b000000"], 0x24}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28) socket$inet6(0xa, 0x1, 0x0) 3.169416093s ago: executing program 1 (id=1760): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="010000000000220010000000000000010000000000020800450000740001400040063c817f0000017f000001", 0x2c}, {&(0x7f0000000500)="0000d9269d790000c8aeec0ed69cad990000000045", 0x15}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r2, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c2132", 0x10}], 0x1}}], 0x1, 0x4000000) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f00"], 0x54}}, 0x0) socket(0x10, 0x803, 0x0) socket(0x1, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_buf(r8, 0x1, 0x30, &(0x7f0000000080)=""/239, &(0x7f0000000180)=0xef) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000002e000000080003002eb3b61f2d6a297a08322ade7b3f921dcf909e8e1d2d83c3fde5d4d79d80bf59f694562b8e49c9e51918780b34f457b094498a8614919454abcaf0ea661b25b274ec4180a00100607045178d09ad0751f383a4f869a3e9d9193be4ac6f8727056376958aebf9acc5c2a28b59d982924b98c8e9f9491c9df9d4bf4ad6d6e42ca3c3", @ANYRES32=r12, @ANYBLOB="0a00340002020202020200001000490008ac0f000cac0f0004ac0f00"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x7c, 0x30, 0xffff, 0x70bd2c, 0x25dfdbfb, {}, [{0x68, 0x1, [@m_nat={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xaf, 0x1, 0x2e3fa6bf2c47fb38, 0x1000, 0x10}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}]}, {0x13, 0x6, "5422002fcf6706afb352af162f6c49"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r13, @ANYRES32=r7, @ANYBLOB='&'], 0x10) 2.711048038s ago: executing program 3 (id=1761): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x70) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) sendto$packet(r2, &(0x7f0000000100)="094a9e5203eb4a", 0x7, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) 2.62821575s ago: executing program 5 (id=1762): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x20, 0x3, 0x358, 0x230, 0xa, 0x148, 0x0, 0x10, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @multicast1, 0x0, 0x0, 'bridge0\x00', 'pim6reg\x00', {}, {}, 0x0, 0x0, 0x10}, 0x0, 0x1c0, 0x230, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x3, 0x800, 0x10, 0x7, 0xa696, 0x6b22, 0xb870, 0x20, 0x20}, {0xffffffffffffff7b}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3b8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x9, 0x2, 0x2, 0x2, 0xd}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01fffc00000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004"], 0x38}}, 0x0) 2.521390097s ago: executing program 1 (id=1763): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$kcm(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0xe4, "c08fc75947e85d63e62b5041bf40cdfc56ed05b43e2614bfd04664879354011a06d2d8966b654d40ec7128a0d57a99fff0aa2879fe6c85d8b44b439f129243a55f78f882c93b94d03e86f03f45755021e88c62185df0ccc6f231c1b534e9a670251cb46793abfc74ffd9f9b8fa8c83a2123920bce8a7479e7510fa83841b313cc455e263c90a899c0727eae6368d7f97ea36835886fb363fc0909e3faacd70368c650ad5afaa1d7a7e3b991707c2ea7748ad6d11af6f5c45504a058a7aeaab092df3247702d81f6fb8084ddb23c576f7cdcb16aa97081f9c648090022ef9329843d3fa3d"}, &(0x7f0000000600)=0xec) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000640)={r2, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000640)={r2, 0x2}, 0x8) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) (async) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r4, &(0x7f00000000c0)}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r4, &(0x7f00000000c0)}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001"], 0x4c}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8b35, 0x31}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ffef313c5c"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8b35, 0x31}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ffef313c5c"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) socket$kcm(0xa, 0x5, 0x0) (async) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r10, 0x84, 0x1e, &(0x7f0000000000), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) pipe(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 2.500157808s ago: executing program 5 (id=1764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xf03a0005) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) 2.482046114s ago: executing program 6 (id=1765): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x406a6194}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x480c0}, 0x800) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="b4090000000008956910b40000000000c409000000000000950074000000000007fa1346fc036e732b21a514ddd30dcca82eda5d9f51a6fa9aefc925afacb2e7639519b4653f07abae8ffaf38aeff896aabef225204b85ea9bde"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) 2.409546248s ago: executing program 3 (id=1766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0x2, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x800, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0x5, 0xffff}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0x2, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x8, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x8000) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (rerun: 32) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) socket$packet(0x11, 0x3, 0x300) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtaction={0x1bc, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x1a8, 0x1, [@m_bpf={0x1a4, 0x18, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x4689, 0x1, 0xc, 0xadd}, {0x651, 0x9, 0x5, 0xfffffffb}, {0x100, 0x6, 0x80, 0x3}, {0xff, 0x2, 0x80, 0x3ff}, {0x10, 0x3, 0x80, 0x5}, {0x0, 0x5, 0x6, 0x4}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0xff, 0x0, 0x5, 0x5}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xe9, 0x6, "1147fcdbce466b00bc57007178f9fdaffd7d6f079c340c75fdb80628da0a852defc344273c0d4560ebcf59670634d053725f4cffd53a7711d945a82f3e8a14d1bb8a97b6a6f84f5f003aec1d1d5d330749c1aa9cc0714e30d57359a89b6f3e29974c651e55a9cfa1d4ceacb5bf6252ea396b9005ce55a4f667183f57405d6131903087f49f0d1f0902655c97c37e2cdb8a47a617407c71823ab3ca4ce393c5b4b85bf85003be64b8c4f6d2322453ab9135d90c640be5b004ecc3dfd8903c8c704ad9360fcfd9fc964d4976946651e4e3fd14a85bee87bb9ca90f5305ca4491eff6bb49dc21"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x1bc}}, 0x20000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c00028008"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) 2.235397528s ago: executing program 6 (id=1767): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x8, 0x4, 0x3) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x206, @remote, 0x1}, 0x12) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "b40486fc7c00", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x141) mmap(&(0x7f000060e000/0x2000)=nil, 0x2000, 0x1, 0x20010, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "feffffff", "ecba06893bcdc493"}, 0x28) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x23, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r5, @ANYBLOB="05000000000000060000130000000ac55f7a", @ANYRES64=r0, @ANYBLOB="0c009900341300006c0000000c0043004000000040000000"], 0x34}}, 0x20004834) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020028bd7000fddbdf25700000000c00990000620000000a000600ffffffffffff00000a00060008021100000000000a0006000802110000010000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20004004) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000000010100000500010008000000080004"], 0x2c}}, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000340)="abed1a", 0x3}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2.08101783s ago: executing program 5 (id=1768): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xb, 0x1, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4004884) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000800000218110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000696c6c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000940)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000b40)={r9, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000d1780)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000d1980)={0x0, 0x0, "fdc2296aa2b0013bc5d5b053e90a6859feeb49550b5481352d2852aa786fad0215780bf776202e4ee08a913a6e24344d9b158e7367399a9653e11dc2a5a8c75ffdd476b0b18ccaf074a76dee0208163d5375149daf2687bfc98de3f75515eb0bb3e3720010177da440d736582b3e8366675ecfc34ff2c8c55f0f1ff128260c6bf7be92605e858fd9a6e94f2f054b8e2cac49615a72d5e8533e6e25b545e4f1bd08a564cd0bba301b84d35f98c207240443dcf0586533e7ae90a2902deced984fc767050e41cbe488f8282de0a8eed5524590d498a84af27812967f795653364e144c28bbf6df77faed8438fc04eb47fb5d57162851837670dc17ef9bcec16798", "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"}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000025c0)={{r13, &(0x7f00000004c0)='@)&\\\x00', 0x40000, &(0x7f0000000540)={@_ha_fsid={[0x0, 0x4]}, {0x1000, 0xfbff, 0x0, 0x8}}, 0xf2e2, &(0x7f00000005c0), &(0x7f0000001b80)=0xffffff7f}, 0x9, &(0x7f0000002480)=[{0x3, 0x7, &(0x7f0000001bc0)='^$(#{}\x00', &(0x7f0000001c00)="74fcc96561e00232ba2cee489290ba0f3ca818b14e8c53433922ef92977a37601265eeef615059a9382e326171b058360777f3e100d421c5f01674edc3d512d5def1180ffea68bbcfae8a34c5786566d56b7b572b7edd157dd1c59b1341e621ff98b602ddf6ae841d0166cf8860f899b38bb4692f76056c8cab91e49b44bdec44a3e0e0df5a6d80b89bdbdf7b0da0059f89fd491c4757eff2dc537555d78590b13943c532e09ba7743a19216bcfac4043efdc4d1b00abd00746a7c62cd0dfd94fbe00ebf708bd4dde17d093c82dcb696e4691905370e939f9a4d1ba61702e4abc73687457c5997e28d3f", 0xea, 0x12}, {0x2, 0x1, &(0x7f0000001d00)='gred\x00', &(0x7f0000001d40)="c19ad77cd56d377437bda7101d1d", 0xe, 0x695a2e1f1f5867fe}, {0x3, 0xed0, &(0x7f0000001d80)='\x00', &(0x7f0000001dc0)="21054c72ae2d84693df0734208ab05883024dbf5af488b4583f82cd449b1e0e32d9d65f08afe351be6e73ea2f50b7029b8f33895d254565eb8ed3abc997de369a95acfe569c3fd0bdaea141dba3ab9c5fe2cca323946bc337cd2614fe597a0264d44ad592c24962d1376a862cf957cd6e1de48556e3335f6b04094e40a5f5c9106e385409a26f433084ede643f0b1900b9", 0x91}, {0x0, 0x9, &(0x7f0000001e80)='\x00', &(0x7f0000001ec0)="c4b535da05dfb907e98520f9742b45cdae17efb2639a68e02462a83d758f4fd48e62bee7c263b599b82b481b5010393045f7c3dc7ca7f31847a68b964db1804ecbc19eb8017020db917969ef095d019a56607e4d507b4c0fc04ade39803bbd55c1af0689f248bd8e942e9d96cc03855fd72f0a1d1d66895b5496661cbbfd6c1deafbea68443ade58b8ae5214cf78c94e3ec3a1333c4a2d1d8c4c6ec6136e46ae485a9eb5bc9df7b2578819e5db834f2938f3a551738134f5164045fcd9a7b435711ad7641bb9948a9f666bab04c3c095f0d62dc4388e590145", 0xd9, 0x18}, {0x1, 0x3, &(0x7f0000001fc0)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000002000)="99f8f787f74b1025a78f995d6d39f944ac3358a0e67f8696cf44f469625feef12098d61a5db250d917bedf90ab72612ec0708f0fb82feb65fb6c402ad4e85b5ebc53272b17b8580e53a56eb289510a5819cfd5fdd2beea2d29646e7b12d0ff9b7cd3212a9892edd36b6b2b0e97ea5c5e5b10ebd8e39d2b5b43bcbd9a0b579470a3f880cb2233c8ebb2721b874383f641a563e3e2f33624a5a95186c34dea80fd4534dcbc39cabee53cff47a15c005e79b011b86492c40a15d7308c52cd", 0xbd, 0x8}, {0x1, 0x0, &(0x7f00000020c0)='\x00', &(0x7f0000002100)="f2c421aeb85f5431b83fe152b9bea23eb359ca021fcf225e987f4e74a1781e7493b5c28d8e1d2b435ccbe0a195ce6045ed68c8adaa7478df2b557c5e1ffa5f24b7a302bbf493d235244262c952226b65c477e67914d46351e7e5b5dc958fafa49b4a4dbc6c487129f83ce7545b678d50a9832fa4c505696f7f4905cc9cbbdacce19e56791c5e1f06367392b188b2439d10d14fcd12b25221369b833d323047aa047b36da0bb0b98b62ffb039da26879dbff9c4f10f3a8cdba0ea92904cfdca3f56d4589139f76a4f18fbeba3607e075f72e8997b2a897fcc7157299f5284eba3826d660f6e35a3bac8433d9a9e02da4daff4fd2178ae70fe8b", 0xf9, 0x8}, {0x3, 0x3, &(0x7f0000002200)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f00000022c0)="a2fb87c67717584d7d024fc570ecb6acff3cb5a90a82ed3823bbcd21372d10499cb2651a52b0dde2e01adb8cf257cb128ee9f06c15018b5f7b04338d5dbbafa4a596139fb19839d7f8d235d8ce0fcbf7973a6dfa", 0x54, 0x40}, {0x73e6980e1447fd10, 0x4, &(0x7f0000002340)='\'&f(-.\x00', &(0x7f0000002380)="63b8f701526186968366a49866d995de71686e45aec60cef1fc1ab88494429f0b39239e9f17a90eca0921f38cb9c515137be0093a320de41e54d87b55d3088d3a93f25f2", 0x44, 0x1c}, {0x2, 0xffffffff, &(0x7f0000002400)='syzkaller0\x00', &(0x7f0000002440)="838720558f91a800237725346e4c32895e39a9c0e0d50415dacb41480e2f91a59645", 0x22, 0x2c}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r14, 0x84, 0x77, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000d2d80)={0xff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {0x0, r11}, {r12}], 0x0, "8f8214df7fea99"}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1403000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="bc0000000109010100000000000000000a000005740002000c00028005000100110000000c000280050001002f0000000c00028005000100850000002c00018014000300fc020000000000000000000000000000140004000000000000000000000000000000000006000340000300000c000280050001008800000002000280050001003a00000008000640000000010800054000000002080006400000000008000340000000020c00048008000140000000000800034000000004"], 0xbc}}, 0x80) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc142efd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @multicast}, 0x14) 549.261627ms ago: executing program 1 (id=1769): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fb, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffeffff}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x40001}, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) unshare(0x24060400) ppoll(&(0x7f0000000480)=[{r2, 0x80}], 0x1, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 548.249781ms ago: executing program 5 (id=1770): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x401, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x10000, 0xf}, 0x10) (async) sendmmsg(r1, &(0x7f0000000000), 0x0, 0x9200000000000000) (async) close(r0) 546.559576ms ago: executing program 0 (id=1771): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500354100006ac30000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40880}, 0x44000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r11, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r13) recvmsg$unix(r12, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b400000000000000790000000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r14}, 0x94) 405.691633ms ago: executing program 3 (id=1772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r1, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x6a}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x25, 0x5b, "10288a44d251c6f596790d113be9b5044d56c9c64a45f74e8c5cef74b2c4906393"}, @NL80211_ATTR_FRAME_MATCH={0x49, 0x5b, "aa77bb6a2328c7ba4fdf304fa43884e0f595be8472c02117ff414e973af4969dc0efad95f2f5559a5d61494109f556bbe1caff6b12a089911d9386c9c7698a0a217ca61c9e"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000010}, 0x200c0050) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe9}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x48}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x5693) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x234, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffde}, {0x8, 0xb, 0x20}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x19}, {0x5}, {0x6}, {0x8, 0xb, 0x400}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4c96c9ab}, {0x6, 0x16, 0xfff8}, {0x5}, {0x6, 0x11, 0x1000}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x4e}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7fff}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x10000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0xad}, {0x8, 0xb, 0x7f}}]}, 0x234}, 0x1, 0x0, 0x0, 0x4041}, 0xc104) r4 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$OCFS2_IOC_GROUP_ADD(r4, 0x40186f02, &(0x7f00000006c0)={0x7, 0x7, 0xff, 0x8}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x74, r5, 0x700, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf9e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x400040d4}, 0x40) unshare(0x4020800) r6 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000880)) vmsplice(r6, &(0x7f0000002a00)=[{&(0x7f00000008c0)="2acc5f2c5ec02299c2d5d2d18ada6b7d8e3495c69f3507e16a43b5b79eb8e43088db4ff5084982deadd1abec8a92d3294e3680dc2c59ed500718f773fb11329e7d1b4522d8cd7623e7d6fe0083290fe1e82c4d33aada01d05dd414e2604d363be3a62b0a6aa58161f14bc9628304e43eda0cefedaee78eb982b5db0eba88ddfdfa370bbf63a8b5aff635abff26a7e8e5d32278d86cf70afb0595e605da9057e30235fe3cb1922251276acf9dfad383164a7785ad351e3ed8d5e72221036cf5a0d7a1c78d6b69c42ca96a123c3015e2d35204be17f69a3bb9473a948aeefff3b118d7d0", 0xe3}, {&(0x7f00000009c0)="26cba7c5298c5f754b611d698d9dc90f461f0311c2d36ba2433e82065dbb5d1ca431ef650dfd86", 0x27}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="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", 0x1000}], 0x4, 0x3) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x14, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000003) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002e80)={0x0, 0x0}, &(0x7f0000002ec0)=0xc) r9 = getuid() ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000002f00)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000003480)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@initdev}}, &(0x7f0000003580)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000035c0)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f00000036c0)=0xe8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000003940)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000003980)={{{@in6=@private1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000003a80)=0xe8) r15 = openat$ppp(0xffffffffffffff9c, &(0x7f0000003ac0), 0x5018c2, 0x0) r16 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$netlink(r7, &(0x7f0000003b80)={&(0x7f0000002b40)=@proc={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc, &(0x7f0000003900)=[{&(0x7f0000002b80)={0x288, 0x16, 0x200, 0x70bd2a, 0x25dfdbfd, "", [@generic="786b91ec7fc481b8d01c560564e7b8bbbe82bf3452d51a30a82dd6dd", @typed={0x14, 0xce, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0x8f, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x4, 0x32}, @generic="ea38cdccd0bdcf0a88fd0891c87ec70d9a1bc4ec7eeee1a79f74f296a1d98cf6b3b8e21ce15e5a7f188f957c6a3ffbde4ef6186a6912fd1fba111dea", @typed={0xc, 0x10, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x126, 0x0, 0x0, @ipv6=@local}, @generic="34618ffe4ee9f83b665a6e5b8dce0a2427a9528411d3a1588fc6880793c0b5c3e242ac38836734b62def6ee14ebbae5f83efb4d3cc5e358bc38425198b6275e2ead7262c332b14c068b74b1e9f5f31b58948c79ce45f538aad28abfdc8d32bf84aba498003159b62517334cc860e22c488889bd6aef94b6c6ee886b2b70d7c674abff42e9f25d8e242b048f53f6bbea6bc6811dd777f9dd6db4ebbce659507c32c4859f620a845c4643b48de4ae77005afa9fdb1576c25a8d573e975d28417f5d0b36147d2be915123", @nested={0x114, 0x40, 0x0, 0x1, [@generic="9a29ee31abd853856a0fa3f52214dfbaf868bce0bebd1485ae6004a4cb57e87dd41ac5fedd899e7f33e772769e2c0b4254d8bb1c3aacde6d96096cc5141abeb13bac0ee1d203fdbf848986c41b6064fc3a1bf07c74ce6f40ff0f2b50a91e9fddd90eed42ff6ab798a359db67cb55863377c47006ee1c54c3104cc3a2eb105da75c6ec898a44dc1c01a01f6211fdeb1b98fdefa7fed1af20ca1f9ad5694a35a376c0185598dc759b22745cf641b0f9509663b76be79622100bac266168f0813194f49f9691a96", @generic="56c676694dbb19d38f9b7c04236b333af6828787ae012a1276adaaab1cf707610a1cc2dac9d9a6de2d4a", @typed={0x8, 0x154, 0x0, 0x0, @u32=0x13}, @typed={0xc, 0x11d, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0x118}, @typed={0x8, 0xf5, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x288}, {&(0x7f0000002e40)={0x14, 0x21, 0x20, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x4, 0xc6}]}, 0x14}, {&(0x7f0000002f40)={0x510, 0x3a, 0x10, 0x70bd26, 0x25dfdbfb, "", [@generic="6a15f7047b0eac9154a92ff213a94e8e24251eca7162c38c30368946762285cc56bd8f9940dcde9ea0b7b348fba9a76ed5a45354d0e361679cc739439e7cac6330a451edb63447446309612065b50ba85c0b50be31ea9f78271a48a4b020340665efcd41", @generic="3faed9fe1d", @generic="1583cea54b769f87a0299ab875666168d903c4b8d1db5e6d46052f6aaf57ed434cc040013e3a43f3c387dab63207ab98302c131c659ee549b20365c9ef636c78f8cd624b97da4a7b25614dfac1e65becec14f0c5c1f3a9ea47c287a2f30605668c2f5a30e8b0bdd1c9fec7d8ffc5edeb77a2758ae99aefc337ca18fa69", @typed={0x8, 0x17, 0x0, 0x0, @uid}, @generic="5e339fe24b9d88d1302a12c22c4a59a0367c32f0d32ed815e9417f2f6e9d", @generic="aa58b6b62194f8a667ae391eb5ec8ce2b61dff934c01493d6fa8db035a26d8a2b55697618cf926d390614b5e90b50cfcaeafe225cf0c9f7d2a2e70eb797d73a6076396bcc12eb4bc83709c089b06c50766c6779210c3e5e8eab4e08006c316e8131a96671c2a401a54c0e5f4aeb6406e49001aa018991336aa4ff95317825e04dfd99e3be58eb3b39aca66c8f8c060ae10e5e76ace8215903d15708028a96fee2daa71b2e2495a27d7f48f15d6", @nested={0x42, 0x43, 0x0, 0x1, [@nested={0x4, 0x50}, @generic="67bfbb7913a4ac649c7e338896b374c58c8d96cc5cb67d25605d89271dc666b076369ebff3517eccfd79ef60e26292c087f1ae2249623de086c7"]}, @typed={0x8, 0x27, 0x0, 0x0, @str='\x1a${\x00'}, @nested={0x16e, 0x13f, 0x0, 0x1, [@typed={0x8, 0x122, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0xcf, 0x0, 0x0, @uid=r8}, @generic="4c7aa73cbd784f626f1f01e567383dba9842e7a28a502bb19743ca4ccf91080af42c3812c0a28fafb6254874a563f5dc3998cc3e9da7a98ff9d2424b7d80f56bfa6b08a6995fcbf1ce65805251badbb3b5f82051432863940cd98ce60d12f8b253fc5bdc67da6fed873a35c641d343bddb57b92faf5a141b61ca903e4e8424595f5c57b0c9656e96f40fab4227d7257116d8dbdf725b1f6f8209b37ba03bf89169de994053a06df66549efc21ab8da5fe01b2b3ba75ec66dd29ecf7424c9d43e640d3447", @generic="df547b36f1f12f10b76ddc9678d192090308531b72ed1cd4c2c981ff84fa536c8ae0fa9d972739319939ba50901cdb6ede948709c9de723d770a2e12f5575f55a335a6b181be52f290e30267331f74954ff6bc204a23d7e118bef368c04540a6c213233cf11f60f2536985e2450e6f5172d48532e8f2cf9166c7b3163fe5a40a404cbb01f60801f092749572cdae00254384", @nested={0x4, 0x13a}]}, @nested={0x186, 0x15e, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @fd=r4}, @typed={0x8, 0xf3, 0x0, 0x0, @uid=r9}, @nested={0x4, 0xb}, @generic="0da2783087a640150901e93a64df6c49c1c79e503e5487f0ce1dbb14f9cde4d93733df43e7e31171d1c5229c2893c841c27f88fc6d6eeb01f7d65bba27ca6e0391a98bdcc814474efdfeeab34eec73bb2588d6", @generic="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", @typed={0x8, 0x14e, 0x0, 0x0, @pid=r10}, @typed={0x8, 0xc6, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x151, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x43}]}]}, 0x510}, {&(0x7f0000003700)={0x1d8, 0x3e, 0x100, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0x124, 0x0, 0x0, @uid=r11}, @typed={0x14, 0x16b, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0x15b, 0x0, 0x0, @uid=r12}, @typed={0xee, 0x2c, 0x0, 0x0, @binary="2f5ce52dbc1da216100ae35bfc5ff32115828aba54c900dece873beb51c89598145986eda2848b8c1dfd28c385bcb7898bd8d0bf86e19cfd742ea18ac386f5cffd4a17ff77993c0e39566fa65d067b9315ddd906b925e3f859d9d89fd52b7a9b74056b8f8b8c955b17d9e0f3649c97a7748e476228ba9bfa19e1bc8c1cb872424cde12112b68f507dcbe6a26fc55d95348c5fa60df15bbb10abc7adbf6852c89b3b80f3798f0631405bb4b2ad98aef68905b3300f719c7c78ca1b4a62fb82fa71e143af0bf92456441b460f3ce6db659e93f5a7940bb73cafa9ef287e5b1993dab19d2d0d5bc7384c815"}, @typed={0x8, 0x10a, 0x0, 0x0, @u32=0x7}, @generic="dd418f51ab3a76ed09233d151e494ee8e5c74e896bc64ef467fe6654da86fb160b4be09b453b69ac7b8ce729c9fee28e09c9496bf09ceee5aa274882acc6a2399bfb629b6fd4b96b3108cf5938987a261e01d3c0db5e9ac0f86672fab2e11f41b2c7ce6e1146c48e7d9c53ec1fe9a09fcd913f439c0d763163fc341f87a1ec3e351354a8de3e5d90795d4e1d52b3cdf9a8607e71d21706c2088f9f0affd0ca481b04bcb5de8157e6991c3ba7"]}, 0x1d8}], 0x4, &(0x7f0000003b00)=[@cred={{0x1c, 0x1, 0x2, {r13, r14, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r4, r6, r15]}}, @rights={{0x14, 0x1, 0x1, [r16]}}], 0x58, 0x80}, 0x20044010) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000003c00)={r4, 0x3, 0xfff, "03654f3f73f5db7dcfd757127c38096124d1a6923a0dd83b355b2a8859a86939ed1262752ec5a96389b45b8c2cab0a05d49119c8dab11a27067a576ba5e6c176a64348577071c43eb627bd56f628310b14b7baa8964f84a376c0acf07333583aa8ac77d217de5635bea180daa3a7"}) 165.326257ms ago: executing program 6 (id=1773): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x11) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x24020400) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000540)=@newtaction={0x618, 0x30, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{0x604, 0x1, [@m_skbmod={0xa0, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x74, 0x6, "f4d46e9034944e974308fd9879ad3b192df5ebbe33fd6d478fbb5378f910283dfcd1f27901c1fe278594eafe598276c72276a75cf3f02228a6cafdb6fd5faec3ce50487b012db3bd58b69a79439614758a7ebd215f0a2e00a24a86030667c856392d16d81340b3beb0745b52e9ea9c32"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x120, 0x1f, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x24, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1ff, 0x9, 0x10000002, 0x1ff, 0x5}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xb92, 0x6, 0x5, 0x2, 0x9}}}]}, {0x8b, 0x6, "54ed77ea957da25b5f5692772a6053287b672bea81136a54209d187ac87fec01d9cef6832c878aa28a74fe139dabaf70713df486ef432b903427f5ea8605c5f00077810020cdc04f91c86737112a33344617375ff42a656fec8e5d1dd33e3b25b745476e5bb7c016c3bbd5f591b911ac8aaefacadc3afbb25b240847cb01ed6465e2ae3acfbcfb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x138, 0xe, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8001}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x5, 0x20000000, 0x0, 0x400}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100, 0x1ff, 0x2, 0x8, 0x8}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x9, 0x10000000, 0x5, 0x33a}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}]}, {0x9a, 0x6, "a435dcd0fdb7f0c0f6da197f821f08a3d74bccad8c6d6e6c84080a58ec6b3110767944dca3467b6a3bb4e61dceb6e39f03b0bcc804c0909d5a7e8abd9324630bc2d59f5cf762c6c8963bf5df4172842f7bb67404dbcfb7ad22519c8dd3c2531a4fa99f3477445017a92684f7722c8564e7f6ed07a7b9d309d22e75e816fb92a68e8cbdb3cf6d9afb3dcc3738c07faf3a746276f107e0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xf4, 0x16, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x94, 0x6, "6886f673423590a88e0c79f09fd44733e00cf69f8e4654454300fee7b99c2c3fbf14820e8ecb5972581747536e0579d2aa9a6fcfc2ccdf18e08d0b84fed08a45ee440007faa5cb6645d1ef694f5191cd3f2720938a9ffff495f5b892450490828425db8dc2f66d1d46f48e30ce4d201376b99b67daab9f6a4abb450b3f25dbc9f97a9961be0556f58e070bec9eb73e09"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0xf8, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}]}, {0x7c, 0x6, "b1d0c1f8b760e27bc7d148e97cf9818bd79694b81f4444a3861446f53ca88b8530d6deb28ba516726ab3e9f400eecc9a4324055413a5b19b1012e53ae41f4ee1bc334983c63a69ceb66bc1bcf8c550c2e4d84d331daed79414e05d526b3c4f171ac9106992f3240d07ea694a4dcf3f1b1991e73387370cd8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x11c, 0x1d, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_METALST={0x34, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xd33}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x4}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x0, 0x14, 0x1ff}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x10000000, 0x8, 0xdc7}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}]}, {0x61, 0x6, "b88366948763f1d792fb99fa7faafb64992958dbc3054c3c555a596ec41f79d98ae954b4139f189ae43b3e1ea0ddff8bfb10ebb77101ee6e616192116489c51d0c5145831a6e6dde4c8bb57b2c5a11c11314e63f614299d00394b261a7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x618}, 0x1, 0x0, 0x0, 0x881}, 0x8000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0xffffffffffffff92, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a000d615000008009f0005000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000280)=0xff52, 0x2) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000001c40)=0x4) r8 = socket$key(0xf, 0x3, 0x2) recvmmsg(r8, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000120a01040000000000000000020000000900010073797a30000000000900020073797a31000000000800034000000008130004800f0001"], 0x90}}, 0x4) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000500)=0xffff0080) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000000)=0x8) 162.98108ms ago: executing program 5 (id=1774): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0xffff1c74, 0x1800}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x49}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0xffff1c74, 0x1800}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x49}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) 0s ago: executing program 3 (id=1775): socket$kcm(0x29, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f000000400000004200b54c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)="6183c2d282", 0x1003, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000180), 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$xdp(0x2c, 0x3, 0x0) shutdown(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000300000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000001, 0x4}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x18, 0x5a, 0x1, 0xfffffffc, 0x80, {0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x14, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) unshare(0x400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000060a010400000000000000000a0004050900010073797a310000000028000480240001800b000100657874686472000014000280080007400000001008000640000000010900020073797a3200000000050007"], 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet_buf(r7, 0x118, 0x29, 0x0, &(0x7f00000003c0)) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000b00020009"], 0x50) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r10, 0x0, 0x80) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sendmsg$can_bcm(r8, &(0x7f0000000580)={&(0x7f0000000140)={0x1d, r9}, 0x10, &(0x7f0000000480)={&(0x7f0000000280)={0x6, 0x1, 0x7, {0x77359400}, {r11, r12/1000+10000}, {0x4, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x0, 0x0, 0x1}, 0x17, 0x2, 0x0, 0x0, "30133749abbc2c5a78755351858dc485755b2e3b2f37bdbb0127fc91b3dccc64b50c0744e1c4ab624e7d54866325ba0a578abd9156a96a75d07fc6a6833c6ab5"}}, 0x80}, 0x1, 0x0, 0x0, 0xc0d4}, 0x4000000) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x14c, 0x10, 0x713, 0x70bd2d, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e23, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0xfffffffffffffffd, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'authenc(crc32,essiv-cbc-aes-sha256-ce)\x00'}, 0x0, 0x80}}, @tfcpad={0x8, 0x16, 0x20002}, @iptfs_pkt_size={0x8, 0x29, 0x2}]}, 0x14c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.1.561'. [ 192.092430][ T8246] netlink: 32 bytes leftover after parsing attributes in process `syz.1.561'. [ 192.111396][ T5808] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 192.248867][ T8249] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 192.349733][ T8253] macvtap1: entered allmulticast mode [ 192.360291][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 192.362613][ T8249] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 192.379128][ T8249] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 192.511576][ T6698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.751772][ T1773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.920216][ T8272] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.151446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.738692][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'. [ 193.738720][ T8310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.576'. [ 193.797435][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.150581][ T8315] validate_nla: 1 callbacks suppressed [ 194.150719][ T8315] netlink: 'syz.3.577': attribute type 7 has an invalid length. [ 194.150736][ T8315] netlink: 'syz.3.577': attribute type 3 has an invalid length. [ 194.150748][ T8315] netlink: 224 bytes leftover after parsing attributes in process `syz.3.577'. [ 194.370855][ T8315] netlink: 'syz.3.577': attribute type 1 has an invalid length. [ 194.370882][ T8315] netlink: 224 bytes leftover after parsing attributes in process `syz.3.577'. [ 194.434988][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.435063][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.449411][ T254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.449622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.259174][ T8336] xfrm1: entered allmulticast mode [ 195.470952][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 195.763784][ T5617] net_ratelimit: 2 callbacks suppressed [ 195.763808][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.483119][ T8378] netlink: 'syz.1.588': attribute type 3 has an invalid length. [ 196.483142][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 196.769560][ T8346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.775499][ T8346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.796344][ T6698] IPVS: starting estimator thread 0... [ 196.831684][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.976175][ T8387] IPVS: using max 27 ests per chain, 64800 per kthread [ 197.351266][ T6691] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.351316][ T6691] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.351349][ T6691] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.351381][ T6691] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.552795][ T8401] vxcan2: entered allmulticast mode [ 197.655154][ T8404] netlink: 32 bytes leftover after parsing attributes in process `syz.5.594'. [ 197.655190][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.594'. [ 197.655202][ T8404] netlink: 32 bytes leftover after parsing attributes in process `syz.5.594'. [ 197.655220][ T8404] netlink: 16 bytes leftover after parsing attributes in process `syz.5.594'. [ 197.876022][ T8394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.941340][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'. [ 198.035716][ T8408] bond6: option lacp_active: invalid value (5) [ 198.082629][ T8408] bond6 (unregistering): Released all slaves [ 198.189365][ T8424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.189563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.222190][ T254] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 198.275342][ T6691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.277830][ T8417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.388428][ T8427] tipc: Started in network mode [ 198.388455][ T8427] tipc: Node identity 1000001, cluster identity 4369 [ 198.388468][ T8427] tipc: Node number set to 16777217 [ 198.796856][ T8437] nbd0: detected capacity change from 0 to 63 [ 198.804807][ T8437] block nbd0: NBD_DISCONNECT [ 198.805537][ T8437] block nbd0: Disconnected due to user request. [ 198.805556][ T8437] block nbd0: shutting down sockets [ 198.807718][ T1963] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 198.811943][ T1963] Buffer I/O error on dev nbd0, logical block 0, async page read [ 198.813929][ T1963] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 198.813957][ T1963] Buffer I/O error on dev nbd0, logical block 1, async page read [ 198.813972][ T1963] Buffer I/O error on dev nbd0, logical block 2, async page read [ 198.813985][ T1963] Buffer I/O error on dev nbd0, logical block 3, async page read [ 198.814768][ T1963] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 198.814793][ T1963] Buffer I/O error on dev nbd0, logical block 0, async page read [ 198.815985][ T1963] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 198.816011][ T1963] Buffer I/O error on dev nbd0, logical block 1, async page read [ 198.816258][ T1963] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 198.816280][ T1963] Buffer I/O error on dev nbd0, logical block 2, async page read [ 198.816294][ T1963] Buffer I/O error on dev nbd0, logical block 3, async page read [ 198.816458][ T1963] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 198.816480][ T1963] Buffer I/O error on dev nbd0, logical block 0, async page read [ 198.816494][ T1963] Buffer I/O error on dev nbd0, logical block 1, async page read [ 198.816609][ T1963] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 198.816717][ T1963] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 198.816816][ T1963] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 198.816916][ T1963] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 198.818938][ T7660] ldm_validate_partition_table(): Disk read failed. [ 198.822675][ T7660] Dev nbd0: unable to read RDB block 0 [ 198.827717][ T7660] nbd0: unable to read partition table [ 198.848454][ T7660] ldm_validate_partition_table(): Disk read failed. [ 198.849055][ T8437] netlink: 67 bytes leftover after parsing attributes in process `syz.0.600'. [ 198.850284][ T7660] Dev nbd0: unable to read RDB block 0 [ 198.859230][ T7660] nbd0: unable to read partition table [ 198.921964][ T8394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.143781][ T8435] vti0: entered promiscuous mode [ 199.520825][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.563967][ T6690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.564201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.315679][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'. [ 200.385780][ T8484] netlink: 'syz.5.608': attribute type 9 has an invalid length. [ 200.576984][ T8458] syzkaller0: entered promiscuous mode [ 200.577009][ T8458] syzkaller0: entered allmulticast mode [ 201.001157][ T8393] net_ratelimit: 8 callbacks suppressed [ 201.001182][ T8393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.113307][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.311565][ T6585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.632555][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 201.632638][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 201.632823][ T5618] Bluetooth: hci1: command 0x0406 tx timeout [ 202.032852][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.086856][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.397965][ T254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.401212][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.457323][ T6689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.685514][ T8546] ip6gre2: entered promiscuous mode [ 203.849735][ T8552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.850129][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.876785][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'. [ 203.943404][ T8563] netlink: 'syz.4.619': attribute type 5 has an invalid length. [ 203.943428][ T8563] netlink: 'syz.4.619': attribute type 15 has an invalid length. [ 203.946268][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.619'. [ 203.995034][ T8564] netlink: 'syz.3.620': attribute type 39 has an invalid length. [ 204.030951][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 204.189027][ T8570] netlink: 'syz.5.621': attribute type 14 has an invalid length. [ 204.867162][ T8596] syzkaller0: entered promiscuous mode [ 204.867200][ T8596] syzkaller0: entered allmulticast mode [ 205.185654][ T8629] netlink: 116 bytes leftover after parsing attributes in process `syz.1.630'. [ 205.185684][ T8629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.630'. [ 205.185698][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'. [ 205.277196][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 205.609778][ T8639] netlink: 20 bytes leftover after parsing attributes in process `syz.4.632'. [ 205.914719][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.634'. [ 205.917232][ T4932] block nbd0: Receive control failed (result -1) [ 206.191470][ T8627] net_ratelimit: 11 callbacks suppressed [ 206.191493][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.223911][ T8668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.224244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.224604][ T8668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.226110][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.290484][ T8668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.290865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.292576][ T8668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.292838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.293117][ T8668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.789221][ T8685] netlink: 'syz.4.638': attribute type 16 has an invalid length. [ 206.789247][ T8685] netlink: 'syz.4.638': attribute type 17 has an invalid length. [ 207.302805][ T8685] bond1: left promiscuous mode [ 207.302830][ T8685] ip6gre1: left promiscuous mode [ 207.339879][ T8709] netlink: 'syz.3.641': attribute type 2 has an invalid length. [ 207.341164][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.641'. [ 207.365903][ T8685] ip6gre2: left promiscuous mode [ 207.369320][ T8685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.761995][ T6691] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 207.762446][ T6691] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 207.792813][ T5804] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 208.013870][ T8627] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 208.083314][ T8731] syzkaller0: entered promiscuous mode [ 208.083341][ T8731] syzkaller0: entered allmulticast mode [ 208.134367][ T8627] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 208.284271][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 209.157424][ T8770] vlan2: entered promiscuous mode [ 209.157450][ T8770] gretap0: entered promiscuous mode [ 209.672584][ T8786] Bluetooth: MGMT ver 1.23 [ 209.708217][ T8795] netlink: 'syz.4.651': attribute type 2 has an invalid length. [ 209.894294][ T8800] __nla_validate_parse: 1 callbacks suppressed [ 209.894317][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 209.894343][ T8800] netlink: 'syz.0.652': attribute type 30 has an invalid length. [ 209.948850][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 209.948859][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 209.948888][ T8801] netlink: 'syz.0.652': attribute type 30 has an invalid length. [ 209.948888][ T8799] netlink: 'syz.0.652': attribute type 30 has an invalid length. [ 211.526003][ T8800] vxlan1: entered promiscuous mode [ 211.526029][ T8800] vxlan1: entered allmulticast mode [ 211.574795][ T8801] vxlan2: entered promiscuous mode [ 211.574820][ T8801] vxlan2: entered allmulticast mode [ 211.627375][ T8799] vxlan3: entered promiscuous mode [ 211.627398][ T8799] vxlan3: entered allmulticast mode [ 211.642908][ T6685] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.644082][ T6685] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.644138][ T6685] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.644201][ T6685] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.790956][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 211.795222][ T8811] netlink: 'syz.3.654': attribute type 1 has an invalid length. [ 211.838882][ T8811] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.846162][ T8811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.849979][ T8811] bond2: (slave batadv0): making interface the new active one [ 211.857043][ T8811] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 211.874974][ T8811] bond2: (slave batadv0): Releasing active interface [ 211.878913][ T8811] bridge_slave_0: left allmulticast mode [ 211.878931][ T8811] bridge_slave_0: left promiscuous mode [ 211.879083][ T8811] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.883683][ T8811] bridge_slave_1: left allmulticast mode [ 211.883706][ T8811] bridge_slave_1: left promiscuous mode [ 211.883919][ T8811] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.924258][ T8811] bond0: (slave bond_slave_0): Releasing backup interface [ 211.929440][ T8816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.657'. [ 211.929462][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 211.962654][ T8811] bond0: (slave bond_slave_1): Releasing backup interface [ 211.980155][ T8811] team0: Port device team_slave_0 removed [ 211.990244][ T8811] team0: Port device team_slave_1 removed [ 211.997485][ T8811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.999527][ T8811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.008719][ T8811] net_ratelimit: 79 callbacks suppressed [ 212.008738][ T8811] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.126987][ T8826] netlink: 'syz.5.658': attribute type 1 has an invalid length. [ 212.255798][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.659'. [ 212.270482][ T8836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.661'. [ 212.292071][ T8831] bond2: (slave veth3): Enslaving as an active interface with a down link [ 212.349892][ T8826] bond2: (slave veth5): Enslaving as an active interface with a down link [ 212.384466][ T8826] netlink: 28 bytes leftover after parsing attributes in process `syz.5.658'. [ 212.387451][ T8836] netlink: 'syz.1.661': attribute type 1 has an invalid length. [ 212.387471][ T8836] netlink: 200 bytes leftover after parsing attributes in process `syz.1.661'. [ 212.395631][ T8826] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.957427][ T8860] IPVS: Unknown mcast interface: macsec0 [ 213.075403][ T8866] ip_tables: iptables: counters copy to user failed while replacing table [ 213.114400][ T8867] netlink: 'syz.1.668': attribute type 5 has an invalid length. [ 213.143365][ T8869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.669'. [ 213.666775][ T8861] infiniband syz1: set active [ 213.666800][ T8861] infiniband syz1: added ipvlan0 [ 213.796688][ T8861] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 213.796727][ T8861] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 213.796763][ T8861] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 213.895723][ T8861] RDS/IB: syz1: added [ 213.896255][ T8861] smc: adding ib device syz1 with port count 1 [ 213.898189][ T8861] smc: ib device syz1 port 1 has no pnetid [ 214.935483][ T8906] syzkaller1: entered promiscuous mode [ 214.935511][ T8906] syzkaller1: entered allmulticast mode [ 215.010443][ T8908] __nla_validate_parse: 2 callbacks suppressed [ 215.010465][ T8908] netlink: 84 bytes leftover after parsing attributes in process `syz.0.678'. [ 215.153397][ T8911] syzkaller0: entered promiscuous mode [ 215.153423][ T8911] syzkaller0: entered allmulticast mode [ 215.431384][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.683'. [ 215.650329][ T8926] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.658943][ T8926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.658963][ T8926] IPv6: NLM_F_CREATE should be set when creating new route [ 215.676500][ T8926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.676523][ T8926] IPv6: NLM_F_CREATE should be set when creating new route [ 218.062776][ T8937] netlink: 56 bytes leftover after parsing attributes in process `syz.5.687'. [ 218.070039][ T8937] netlink: 56 bytes leftover after parsing attributes in process `syz.5.687'. [ 218.286427][ T8625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.323757][ T8625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.324547][ T8942] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 218.326331][ T8951] netlink: 24 bytes leftover after parsing attributes in process `syz.5.690'. [ 218.332686][ T8625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.338363][ T8625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.365408][ T8625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.481747][ T8625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.672420][ T8625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.741811][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.773657][ T8955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.692'. [ 218.845132][ T8955] netlink: 'syz.0.692': attribute type 1 has an invalid length. [ 218.845158][ T8955] netlink: 200 bytes leftover after parsing attributes in process `syz.0.692'. [ 219.234967][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.037878][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 220.038634][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 220.111453][ T8990] netlink: 32 bytes leftover after parsing attributes in process `syz.5.703'. [ 220.461930][ T9002] netlink: 44 bytes leftover after parsing attributes in process `syz.0.706'. [ 220.461960][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.706'. [ 220.464043][ T9002] netlink: 68 bytes leftover after parsing attributes in process `syz.0.706'. [ 220.546164][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 220.951816][ T9021] veth1_to_batadv: entered promiscuous mode [ 220.963750][ T9021] veth1_to_batadv: left promiscuous mode [ 221.016544][ T9025] netlink: 'syz.0.710': attribute type 39 has an invalid length. [ 221.322983][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.5.715'. [ 221.597300][ T9043] IPv6: sit2: Disabled Multicast RS [ 221.613678][ T9043] netlink: 'syz.5.718': attribute type 11 has an invalid length. [ 221.942962][ T9059] netlink: 16 bytes leftover after parsing attributes in process `syz.5.721'. [ 222.159324][ T9066] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 222.392299][ T9075] syzkaller0: entered promiscuous mode [ 222.392334][ T9075] syzkaller0: entered allmulticast mode [ 222.394949][ T9075] tipc: Started in network mode [ 222.394980][ T9075] tipc: Node identity 122b5d8be503, cluster identity 4711 [ 222.395337][ T9075] tipc: Enabled bearer , priority 0 [ 222.396708][ T9075] netlink: 40 bytes leftover after parsing attributes in process `syz.3.728'. [ 222.446849][ T9074] tipc: Resetting bearer [ 222.478937][ T9074] tipc: Disabling bearer [ 222.608034][ T9087] netlink: 'syz.3.732': attribute type 4 has an invalid length. [ 222.646430][ T9087] netlink: 'syz.3.732': attribute type 4 has an invalid length. [ 222.804411][ T9098] netlink: 'syz.1.733': attribute type 4 has an invalid length. [ 223.161383][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.740'. [ 223.294922][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.742'. [ 223.787374][ T9135] netlink: 'syz.5.745': attribute type 5 has an invalid length. [ 223.848117][ T9139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.848132][ T9139] IPv6: NLM_F_CREATE should be set when creating new route [ 223.848217][ T9139] IPv6: NLM_F_CREATE should be set when creating new route [ 223.880169][ T8627] net_ratelimit: 16 callbacks suppressed [ 223.880192][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.030820][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.482635][ T9166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.484564][ T9166] xt_check_table_hooks: 23 callbacks suppressed [ 224.484584][ T9166] x_tables: duplicate underflow at hook 1 [ 224.669367][ T9171] syzkaller0: entered promiscuous mode [ 224.669391][ T9171] syzkaller0: entered allmulticast mode [ 224.699813][ T9171] tipc: Started in network mode [ 224.699847][ T9171] tipc: Node identity 6a34ac7bd6b5, cluster identity 4711 [ 224.704695][ T9171] tipc: Enabled bearer , priority 0 [ 224.707458][ T9174] tipc: Enabling of bearer rejected, already enabled [ 224.753061][ T9171] tipc: Resetting bearer [ 224.836395][ T9170] tipc: Resetting bearer [ 224.917443][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.983724][ T9170] tipc: Disabling bearer [ 225.159696][ T6585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.159923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.180260][ T6690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.495198][ T9203] __nla_validate_parse: 2 callbacks suppressed [ 225.495221][ T9203] netlink: 80 bytes leftover after parsing attributes in process `syz.0.758'. [ 225.500756][ T9203] netlink: 36 bytes leftover after parsing attributes in process `syz.0.758'. [ 225.938358][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'. [ 226.314812][ T9237] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20003 [ 226.341873][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.763'. [ 226.435086][ T6681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.722321][ T9257] netlink: 296 bytes leftover after parsing attributes in process `syz.5.769'. [ 226.978445][ T9261] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 227.001122][ T8625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.075140][ T6681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.133091][ T9263] netlink: 6076 bytes leftover after parsing attributes in process `syz.3.771'. [ 227.771916][ T9291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.777'. [ 227.804520][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.777'. [ 228.444481][ T9310] netlink: 'syz.1.782': attribute type 126 has an invalid length. [ 228.514961][ T5621] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 228.518424][ T5621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 228.537250][ T5621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 228.559093][ T5621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 228.572739][ T5621] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 229.071971][ T5804] net_ratelimit: 3 callbacks suppressed [ 229.071993][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.085181][ T9332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.085359][ T9332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.085561][ T9332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.092232][ T9332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.093811][ T9332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.095539][ T9331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.324055][ T9339] macvlan2: entered promiscuous mode [ 229.324084][ T9339] vlan2: entered promiscuous mode [ 229.350307][ T9339] vlan2: left promiscuous mode [ 229.363650][ T6686] IPVS: starting estimator thread 0... [ 229.378007][ T9337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.450877][ T9344] IPVS: using max 48 ests per chain, 115200 per kthread [ 229.637151][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.790'. [ 229.637182][ T9352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.790'. [ 229.825362][ T9352] team0: Port device team_slave_0 removed [ 229.874458][ T9353] syzkaller1: entered promiscuous mode [ 229.874486][ T9353] syzkaller1: entered allmulticast mode [ 229.946901][ T9358] ip6gre1: entered promiscuous mode [ 229.946928][ T9358] ip6gre1: entered allmulticast mode [ 230.112284][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.193738][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.670883][ T4932] Bluetooth: hci6: command tx timeout [ 230.730174][ T9378] siw: device registration error -23 [ 230.950443][ T9412] netlink: 'syz.1.804': attribute type 11 has an invalid length. [ 230.968951][ T9412] __nla_validate_parse: 4 callbacks suppressed [ 230.968972][ T9412] netlink: 3568 bytes leftover after parsing attributes in process `syz.1.804'. [ 232.131841][ T9313] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.131989][ T9313] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.132481][ T9313] bridge_slave_0: entered allmulticast mode [ 232.138203][ T9313] bridge_slave_0: entered promiscuous mode [ 232.172883][ T9313] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.174599][ T9313] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.174765][ T9313] bridge_slave_1: entered allmulticast mode [ 232.180489][ T9313] bridge_slave_1: entered promiscuous mode [ 232.315428][ T9313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.319771][ T9313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.475601][ T9313] team0: Port device team_slave_0 added [ 232.486426][ T9313] team0: Port device team_slave_1 added [ 232.612342][ T9313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.612360][ T9313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.612384][ T9313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.613429][ T9461] syzkaller0: entered promiscuous mode [ 232.613451][ T9461] syzkaller0: entered allmulticast mode [ 232.620192][ T9313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.620210][ T9313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.620235][ T9313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.750739][ T4932] Bluetooth: hci6: command tx timeout [ 232.859557][ T9313] hsr_slave_0: entered promiscuous mode [ 232.871262][ T9313] hsr_slave_1: entered promiscuous mode [ 232.872104][ T9313] debugfs: 'hsr0' already exists in 'hsr' [ 232.872124][ T9313] Cannot create hsr debugfs directory [ 232.926474][ T9468] netlink: 56 bytes leftover after parsing attributes in process `syz.0.819'. [ 233.494799][ T9475] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 233.495638][ T9475] tipc: Enabled bearer , priority 10 [ 233.588884][ T9313] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 233.603539][ T9313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 233.604580][ T9313] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 233.628569][ T9313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 233.642462][ T9313] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 233.660318][ T9313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 233.672002][ T9313] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 233.694459][ T9313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 233.794253][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.827'. [ 233.905926][ T9501] bond0: (slave ip6tnl0): refused to change device type [ 233.909065][ T998] IPVS: starting estimator thread 0... [ 233.935848][ T9499] netlink: 84 bytes leftover after parsing attributes in process `syz.5.826'. [ 234.010900][ T9505] IPVS: using max 33 ests per chain, 79200 per kthread [ 234.213971][ T9313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.271371][ T8627] net_ratelimit: 20 callbacks suppressed [ 234.271394][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.272053][ T9313] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.320339][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.320457][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.392638][ T6690] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.392826][ T6690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.520931][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.831'. [ 234.659482][ T9523] syzkaller0: entered promiscuous mode [ 234.659508][ T9523] syzkaller0: entered allmulticast mode [ 234.831165][ T4932] Bluetooth: hci6: command tx timeout [ 235.087027][ T9543] netlink: 20 bytes leftover after parsing attributes in process `syz.1.833'. [ 235.239810][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.312588][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.461479][ T9551] netlink: 'syz.5.835': attribute type 15 has an invalid length. [ 235.674109][ T9557] netlink: 100 bytes leftover after parsing attributes in process `syz.0.837'. [ 235.674140][ T9557] netlink: 247 bytes leftover after parsing attributes in process `syz.0.837'. [ 235.745206][ T9557] netlink: zone id is out of range [ 235.745224][ T9557] netlink: zone id is out of range [ 235.745232][ T9557] netlink: zone id is out of range [ 235.745240][ T9557] netlink: zone id is out of range [ 235.745248][ T9557] netlink: zone id is out of range [ 235.745255][ T9557] netlink: zone id is out of range [ 235.745262][ T9557] netlink: zone id is out of range [ 236.097597][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.839'. [ 236.298413][ T7660] udevd[7660]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 236.344024][ T9589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.840'. [ 236.344637][ T9589] netlink: 104 bytes leftover after parsing attributes in process `syz.3.840'. [ 236.471500][ T9592] sctp: [Deprecated]: syz.1.842 (pid 9592) Use of int in max_burst socket option deprecated. [ 236.471500][ T9592] Use struct sctp_assoc_value instead [ 236.472199][ T9592] netlink: 52 bytes leftover after parsing attributes in process `syz.1.842'. [ 236.515275][ T9592] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.516937][ T9592] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.671309][ T9313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.671316][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 236.910894][ T4932] Bluetooth: hci6: command tx timeout [ 236.928256][ T9611] netlink: 'syz.5.847': attribute type 1 has an invalid length. [ 236.928278][ T9611] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.847'. [ 237.301808][ T9624] ip6t_srh: unknown srh match flags 4000 [ 237.348033][ T9628] ip6t_srh: unknown srh match flags 4000 [ 238.049893][ T9636] syzkaller1: entered promiscuous mode [ 238.049920][ T9636] syzkaller1: entered allmulticast mode [ 238.306912][ T9313] veth0_vlan: entered promiscuous mode [ 238.365283][ T9313] veth1_vlan: entered promiscuous mode [ 238.372470][ T9649] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 238.408289][ T9653] ip6t_srh: unknown srh match flags 4000 [ 238.538789][ T9313] veth0_macvtap: entered promiscuous mode [ 238.580045][ T9313] veth1_macvtap: entered promiscuous mode [ 238.612712][ T9313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.637710][ T9313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.671339][ T6682] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.716793][ T9665] netlink: 112 bytes leftover after parsing attributes in process `syz.1.864'. [ 238.762361][ T6692] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.791558][ T6692] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.791605][ T6692] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.959076][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.959099][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.036179][ T6682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.036203][ T6682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.064485][ T9672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.867'. [ 239.309517][ T9680] net_ratelimit: 20 callbacks suppressed [ 239.310934][ T9680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.471711][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.669856][ T9697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.874'. [ 239.985448][ T9707] IPVS: set_ctl: invalid protocol: 221 172.30.1.4:20003 [ 240.514868][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.878'. [ 240.514902][ T9711] netlink: 32 bytes leftover after parsing attributes in process `syz.5.878'. [ 240.523480][ T6682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.554459][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.111574][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.111701][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.111839][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.114307][ T9741] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 241.117512][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.117620][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.117718][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.366813][ T9741] netlink: 260 bytes leftover after parsing attributes in process `syz.5.882'. [ 242.166702][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.895'. [ 242.207563][ T9777] xt_TCPMSS: Only works on TCP SYN packets [ 242.358703][ T9777] bridge_slave_1: left allmulticast mode [ 242.358739][ T9777] bridge_slave_1: left promiscuous mode [ 242.359630][ T9777] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.396405][ T9777] bridge_slave_0: left allmulticast mode [ 242.396435][ T9777] bridge_slave_0: left promiscuous mode [ 242.396749][ T9777] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.859542][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'. [ 242.859569][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.902'. [ 242.859592][ T9797] netlink: 'syz.1.902': attribute type 11 has an invalid length. [ 242.859606][ T9797] netlink: 'syz.1.902': attribute type 14 has an invalid length. [ 243.164572][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'. [ 243.682289][ T9812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.733318][ T9810] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.906'. [ 243.798253][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.905'. [ 243.936929][ T9825] xt_policy: output policy not valid in PREROUTING and INPUT [ 244.214060][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.912'. [ 244.508734][ T9845] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 244.509384][ T9845] team0: Device ipvlan2 is already an upper device of the team interface [ 244.623963][ T30] audit: type=1804 audit(1789953841.016:2): pid=9856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.920" name="/newroot/187/cgroup.controllers" dev="tmpfs" ino=976 res=1 errno=0 [ 244.627322][ T30] audit: type=1800 audit(1789953841.016:3): pid=9856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.920" name="cgroup.controllers" dev="tmpfs" ino=976 res=0 errno=0 [ 244.647291][ T9854] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 244.650075][ T9854] team0: Device ipvlan2 is already an upper device of the team interface [ 244.752883][ T8627] net_ratelimit: 13962 callbacks suppressed [ 244.752908][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.816111][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.922'. [ 244.963467][ T9863] bond6: option ad_actor_sys_prio: invalid value (0) [ 244.963496][ T9863] bond6: option ad_actor_sys_prio: allowed values 1 - 65535 [ 244.965462][ T9863] bond6 (unregistering): Released all slaves [ 245.018563][ T9864] gtp0: entered promiscuous mode [ 245.018579][ T9864] gtp0: entered allmulticast mode [ 245.047302][ T9865] gtp1: entered promiscuous mode [ 245.047318][ T9865] gtp1: entered allmulticast mode [ 245.268561][ T9872] syzkaller0: entered promiscuous mode [ 245.268591][ T9872] syzkaller0: entered allmulticast mode [ 245.297993][ T9884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.927'. [ 245.637517][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.797654][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.429391][ T9910] netlink: NAT attribute has 4 unknown bytes [ 246.429431][ T9910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.840937][ T8625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.879375][ T8625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.671167][ T6585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.757690][ T9933] netlink: 'syz.5.935': attribute type 1 has an invalid length. [ 248.849962][ T6692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.887918][ T9942] __nla_validate_parse: 2 callbacks suppressed [ 248.887941][ T9942] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.938'. [ 248.921165][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.925608][ T9934] bond3: ARP target 9.0.0.0 is already present [ 248.925632][ T9934] bond3: option arp_ip_target: invalid value (9) [ 248.956071][ T9934] bond3 (unregistering): Released all slaves [ 249.016726][ T9948] geneve3: entered promiscuous mode [ 249.018612][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.935'. [ 249.038597][ T9933] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.289775][ T9964] netlink: 44 bytes leftover after parsing attributes in process `syz.1.943'. [ 249.290099][ T9964] netlink: 44 bytes leftover after parsing attributes in process `syz.1.943'. [ 249.290335][ T9964] netlink: 44 bytes leftover after parsing attributes in process `syz.1.943'. [ 249.324701][ T9964] netlink: 44 bytes leftover after parsing attributes in process `syz.1.943'. [ 249.325777][ T9964] netlink: 44 bytes leftover after parsing attributes in process `syz.1.943'. [ 249.326017][ T9964] netlink: 44 bytes leftover after parsing attributes in process `syz.1.943'. [ 249.326224][ T9964] netlink: 44 bytes leftover after parsing attributes in process `syz.1.943'. [ 249.326444][ T9964] netlink: 44 bytes leftover after parsing attributes in process `syz.1.943'. [ 249.968307][ T8625] net_ratelimit: 2 callbacks suppressed [ 249.968330][ T8625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.042395][ T9995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.413848][T10005] syzkaller0: entered promiscuous mode [ 250.413891][T10005] syzkaller0: entered allmulticast mode [ 251.391514][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 251.581167][T10054] syzkaller0: entered promiscuous mode [ 251.581192][T10054] syzkaller0: entered allmulticast mode [ 251.813754][T10063] hsr_slave_1 (unregistering): left promiscuous mode [ 251.966720][T10068] tipc: Enabled bearer , priority 10 [ 252.112114][T10074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.163802][T10080] netlink: 'syz.1.977': attribute type 2 has an invalid length. [ 252.195474][T10080] : entered promiscuous mode [ 252.333868][T10087] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 252.336167][T10083] dvmrp0: entered allmulticast mode [ 252.341563][T10083] dvmrp0: left allmulticast mode [ 252.459010][T10087] xt_CT: No such helper "netbios-ns" [ 253.021745][T10103] batman_adv: batadv0: Adding interface: syzkaller0 [ 253.021764][T10103] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.021986][T10103] batman_adv: batadv0: Interface activated: syzkaller0 [ 253.096410][ T8625] tipc: Node number set to 3162614907 [ 253.997420][T10102] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 254.071555][T10102] batman_adv: batadv0: Removing interface: syzkaller0 [ 254.121262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.121812][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.122351][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.122781][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.153083][T10129] tipc: Enabled bearer , priority 0 [ 254.163921][T10123] syzkaller0: entered promiscuous mode [ 254.163943][T10123] syzkaller0: entered allmulticast mode [ 254.248732][T10127] __nla_validate_parse: 26 callbacks suppressed [ 254.248754][T10127] netlink: 36 bytes leftover after parsing attributes in process `syz.1.990'. [ 254.286781][T10123] tipc: Resetting bearer [ 254.335315][T10122] tipc: Resetting bearer [ 254.440068][T10122] tipc: Disabling bearer [ 254.539267][T10135] netlink: 'syz.6.991': attribute type 58 has an invalid length. [ 254.539292][T10135] netlink: 20 bytes leftover after parsing attributes in process `syz.6.991'. [ 254.615987][T10146] netlink: 276 bytes leftover after parsing attributes in process `syz.1.997'. [ 254.630374][T10146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.997'. [ 254.805670][T10153] netlink: 44 bytes leftover after parsing attributes in process `syz.5.999'. [ 255.295503][T10172] bond6: entered promiscuous mode [ 255.295547][T10172] bond6: entered allmulticast mode [ 255.296112][T10172] 8021q: adding VLAN 0 to HW filter on device bond6 [ 255.375168][T10190] xt_policy: output policy not valid in PREROUTING and INPUT [ 255.378490][T10191] xt_policy: output policy not valid in PREROUTING and INPUT [ 255.431156][T10182] bond7: entered promiscuous mode [ 255.431184][T10182] bond7: entered allmulticast mode [ 255.432595][T10182] 8021q: adding VLAN 0 to HW filter on device bond7 [ 255.843684][T10207] syzkaller1: entered promiscuous mode [ 255.843711][T10207] syzkaller1: entered allmulticast mode [ 255.877264][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.878342][T10207] syzkaller1: left promiscuous mode [ 255.891209][T10206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.909335][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'. [ 255.909352][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1012'. [ 255.909367][T10207] netlink: 'syz.1.1012': attribute type 32 has an invalid length. [ 256.013614][T10206] netlink: 'syz.5.1011': attribute type 361 has an invalid length. [ 256.022214][T10217] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1013'. [ 256.270139][T10228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1016'. [ 256.675181][T10243] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1022'. [ 256.675219][T10243] openvswitch: netlink: Flow actions attr not present in new flow. [ 257.131487][T10260] pimreg9: entered allmulticast mode [ 257.422428][T10276] netlink: 'syz.5.1029': attribute type 21 has an invalid length. [ 257.422454][T10276] netlink: 'syz.5.1029': attribute type 22 has an invalid length. [ 257.422466][T10276] netlink: 'syz.5.1029': attribute type 23 has an invalid length. [ 257.422479][T10276] netlink: 'syz.5.1029': attribute type 25 has an invalid length. [ 257.422492][T10276] netlink: 'syz.5.1029': attribute type 26 has an invalid length. [ 257.433779][T10278] netlink: 'syz.6.1030': attribute type 32 has an invalid length. [ 257.465920][T10278] bond1: option coupled_control: invalid value (10) [ 257.494229][T10278] bond1 (unregistering): Released all slaves [ 257.551389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.552873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.553394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.553953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.554407][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.554927][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.640292][T10283] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 257.640323][T10283] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 257.935661][T10292] netlink: 'syz.0.1034': attribute type 8 has an invalid length. [ 258.301338][T10307] bond8: option updelay: invalid value (18446744073709518847) [ 258.301367][T10307] bond8: option updelay: allowed values 0 - 2147483647 [ 258.340130][T10307] bond8 (unregistering): Released all slaves [ 258.493461][T10304] 8021q: adding VLAN 0 to HW filter on device bond3 [ 259.236759][T10358] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 259.309965][ T8624] syz1: Port: 1 Link DOWN [ 259.578461][T10366] __nla_validate_parse: 9 callbacks suppressed [ 259.578484][T10366] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1051'. [ 259.579037][T10378] validate_nla: 3 callbacks suppressed [ 259.579053][T10378] netlink: 'syz.3.1054': attribute type 3 has an invalid length. [ 259.732646][T10373] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20265 [ 259.866707][T10387] veth3: entered allmulticast mode [ 259.920329][T10388] veth5: entered allmulticast mode [ 260.217469][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1056'. [ 260.486662][T10394] syzkaller1: entered promiscuous mode [ 260.486688][T10394] syzkaller1: entered allmulticast mode [ 260.516517][T10405] rdma_op ffff88807ad45238 conn xmit_rdma 0000000000000000 [ 260.534498][T10405] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1058'. [ 260.668635][T10411] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1059'. [ 260.921462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.921980][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.135091][T10422] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 261.303430][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1064'. [ 261.986731][T10450] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1070'. [ 262.207089][T10453] netlink: 'syz.6.1071': attribute type 1 has an invalid length. [ 262.306050][T10453] bond1: entered promiscuous mode [ 262.317467][T10453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.445925][T10462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.447624][T10462] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 262.447648][T10462] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 262.467888][T10462] bond1: (slave gre1): making interface the new active one [ 262.467915][T10462] gre1: entered promiscuous mode [ 262.477264][T10462] bond1: (slave gre1): Enslaving as an active interface with an up link [ 263.146570][T10479] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1078'. [ 263.581636][T10489] batman_adv: batadv0: Adding interface: syzkaller0 [ 263.581656][T10489] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.581689][T10489] batman_adv: batadv0: Interface activated: syzkaller0 [ 263.588655][T10488] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 263.720444][T10488] batman_adv: batadv0: Removing interface: syzkaller0 [ 263.733773][T10497] net_ratelimit: 6 callbacks suppressed [ 263.733795][T10497] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 264.031568][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.032198][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.032782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.033312][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.171363][T10512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1087'. [ 264.196824][T10512] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.610452][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1093'. [ 264.621153][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1093'. [ 264.621394][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1093'. [ 264.621627][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1093'. [ 264.621859][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1093'. [ 264.622999][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1093'. [ 264.623248][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1093'. [ 264.623476][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1093'. [ 264.623720][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1093'. [ 264.624039][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1093'. [ 264.629755][T10537] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 264.681382][T10537] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 265.607565][T10576] syz.0.1103: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 265.607785][T10576] CPU: 0 UID: 0 PID: 10576 Comm: syz.0.1103 Not tainted syzkaller #0 PREEMPT(full) [ 265.607809][T10576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.607822][T10576] Call Trace: [ 265.607831][T10576] [ 265.607840][T10576] dump_stack_lvl+0xe8/0x150 [ 265.607878][T10576] warn_alloc+0x24d/0x270 [ 265.607901][T10576] ? kasan_save_track+0x4f/0x80 [ 265.607922][T10576] ? kasan_save_track+0x3e/0x80 [ 265.607946][T10576] ? __pfx_warn_alloc+0x10/0x10 [ 265.607964][T10576] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 265.607990][T10576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.608033][T10576] __vmalloc_node_range_noprof+0x127/0x1540 [ 265.608089][T10576] ? rcu_is_watching+0x16/0xb0 [ 265.608120][T10576] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 265.608151][T10576] ? __kmalloc_cache_noprof+0x321/0x600 [ 265.608173][T10576] ? __kmalloc_cache_noprof+0x14d/0x600 [ 265.608191][T10576] ? xskq_create+0x56/0x220 [ 265.608219][T10576] xskq_create+0x148/0x220 [ 265.608242][T10576] ? xsk_init_queue+0x8a/0xe0 [ 265.608265][T10576] xsk_init_queue+0x8a/0xe0 [ 265.608290][T10576] xsk_setsockopt+0x52a/0x960 [ 265.608315][T10576] ? __pfx_xsk_setsockopt+0x10/0x10 [ 265.608334][T10576] ? put_files_struct+0x24f/0x350 [ 265.608360][T10576] ? __pfx_aa_sk_perm+0x10/0x10 [ 265.608397][T10576] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 265.608433][T10576] ? __pfx_xsk_setsockopt+0x10/0x10 [ 265.608457][T10576] do_sock_setsockopt+0x17c/0x1b0 [ 265.608486][T10576] __x64_sys_setsockopt+0x13d/0x1b0 [ 265.608516][T10576] do_syscall_64+0x166/0x520 [ 265.608539][T10576] ? trace_irq_disable+0x3b/0x140 [ 265.608555][T10576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.608574][T10576] ? clear_bhb_loop+0x70/0xc0 [ 265.608599][T10576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.608617][T10576] RIP: 0033:0x7fdb1339e159 [ 265.608637][T10576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.608654][T10576] RSP: 002b:00007fdb1420e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 265.608676][T10576] RAX: ffffffffffffffda RBX: 00007fdb13625fa0 RCX: 00007fdb1339e159 [ 265.608691][T10576] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 265.608701][T10576] RBP: 00007fdb1343506b R08: 0000000000000004 R09: 0000000000000000 [ 265.608714][T10576] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.608726][T10576] R13: 00007fdb13626038 R14: 00007fdb13625fa0 R15: 00007ffe63513888 [ 265.608776][T10576] [ 265.608843][T10576] Mem-Info: [ 265.608871][T10576] active_anon:6589 inactive_anon:0 isolated_anon:0 [ 265.608871][T10576] active_file:11 inactive_file:43040 isolated_file:0 [ 265.608871][T10576] unevictable:0 dirty:83 writeback:0 [ 265.608871][T10576] slab_reclaimable:11331 slab_unreclaimable:110724 [ 265.608871][T10576] mapped:39769 shmem:520 pagetables:1340 [ 265.608871][T10576] sec_pagetables:0 bounce:0 [ 265.608871][T10576] kernel_misc_reclaimable:0 [ 265.608871][T10576] free:1270091 free_pcp:9297 free_cma:0 [ 265.608927][T10576] Node 0 active_anon:26356kB inactive_anon:0kB active_file:44kB inactive_file:171960kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159076kB dirty:328kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15556kB pagetables:5224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 265.608984][T10576] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 265.609037][T10576] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 265.611430][T10576] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 265.611475][T10576] Node 0 DMA32 free:1120652kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26356kB inactive_anon:0kB active_file:44kB inactive_file:171960kB unevictable:0kB writepending:328kB zspages:0kB present:3129332kB managed:2546940kB mlocked:0kB bounce:0kB free_pcp:37172kB local_pcp:20528kB free_cma:0kB [ 265.611533][T10576] lowmem_reserve[]: 0 0 0 0 0 [ 265.611573][T10576] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 265.611623][T10576] lowmem_reserve[]: 0 0 0 0 0 [ 265.611656][T10576] Node 1 Normal free:3944352kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 265.611706][T10576] lowmem_reserve[]: 0 0 0 0 0 [ 265.611738][T10576] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 265.611859][T10576] Node 0 DMA32: 813*4kB (ME) 533*8kB (UME) 443*16kB (UME) 430*32kB (UME) 208*64kB (UME) 225*128kB (UM) 108*256kB (UME) 19*512kB (UM) 3*1024kB (U) 3*2048kB (ME) 245*4096kB (UM) = 1120588kB [ 265.612008][T10576] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 265.612101][T10576] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 5*16kB (UM) 12*32kB (UM) 7*64kB (UM) 2*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944352kB [ 265.612266][T10576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.612281][T10576] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.612295][T10576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.612310][T10576] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.612324][T10576] 43567 total pagecache pages [ 265.612332][T10576] 0 pages in swap cache [ 265.612338][T10576] Free swap = 124996kB [ 265.612346][T10576] Total swap = 124996kB [ 265.612353][T10576] 2097051 pages RAM [ 265.612361][T10576] 0 pages HighMem/MovableOnly [ 265.612368][T10576] 428700 pages reserved [ 265.612375][T10576] 0 pages cma reserved [ 265.742671][T10578] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 266.551590][T10598] netlink: 'syz.1.1109': attribute type 1 has an invalid length. [ 267.152165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.152720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.153218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.153733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.352573][T10633] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 267.973131][T10653] syzkaller0: entered promiscuous mode [ 267.973157][T10653] syzkaller0: entered allmulticast mode [ 268.373476][T10672] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 268.455753][T10684] xt_hashlimit: size too large, truncated to 1048576 [ 268.481937][T10680] ip6erspan0: entered allmulticast mode [ 268.906379][T10697] net_ratelimit: 3 callbacks suppressed [ 268.906402][T10697] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 268.949687][T10697] netlink: 'syz.3.1137': attribute type 15 has an invalid length. [ 268.979297][T10697] netlink: 'syz.3.1137': attribute type 15 has an invalid length. [ 268.980521][T10699] tipc: Started in network mode [ 268.980552][T10699] tipc: Node identity ac14140f, cluster identity 4711 [ 268.985454][T10699] tipc: New replicast peer: 255.255.255.255 [ 268.988310][T10699] tipc: Enabled bearer , priority 10 [ 268.992141][ T6686] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 268.992229][ T6686] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 268.992268][ T6686] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 268.992296][ T6686] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 269.009790][T10699] netlink: 'syz.6.1138': attribute type 1 has an invalid length. [ 269.186292][T10699] bond2: entered promiscuous mode [ 269.186891][T10699] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.231344][T10699] bond2: entered allmulticast mode [ 269.277382][T10699] bond2: (slave bridge1): making interface the new active one [ 269.277411][T10699] bridge1: entered promiscuous mode [ 269.277596][T10699] bridge1: entered allmulticast mode [ 269.278801][T10699] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 269.438012][T10713] netlink: zone id is out of range [ 269.438069][T10713] netlink: zone id is out of range [ 269.438221][T10713] netlink: zone id is out of range [ 269.438269][T10713] netlink: zone id is out of range [ 269.438278][T10713] netlink: zone id is out of range [ 269.438286][T10713] netlink: zone id is out of range [ 269.438294][T10713] netlink: zone id is out of range [ 269.438303][T10713] netlink: zone id is out of range [ 269.438311][T10713] netlink: zone id is out of range [ 269.938902][T10734] netlink: 'syz.1.1148': attribute type 11 has an invalid length. [ 270.051713][T10738] __nla_validate_parse: 71 callbacks suppressed [ 270.051747][T10738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1147'. [ 270.100899][ T6585] tipc: Node number set to 2886997007 [ 270.267265][T10748] bond8 (unregistering): Released all slaves [ 270.556574][T10765] Cannot find del_set index 2 as target [ 270.594041][T10762] syzkaller0: entered promiscuous mode [ 270.594071][T10762] syzkaller0: entered allmulticast mode [ 270.601251][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 270.633188][T10767] netlink: 'syz.1.1154': attribute type 4 has an invalid length. [ 272.885292][T10738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.962540][T10806] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AZZI %s [ 274.433381][T10830] ovs-s: entered promiscuous mode [ 274.878358][T10849] netlink: 198796 bytes leftover after parsing attributes in process `syz.5.1177'. [ 274.878386][T10849] netlink: 'syz.5.1177': attribute type 2 has an invalid length. [ 274.905921][T10857] netlink: 198796 bytes leftover after parsing attributes in process `syz.5.1177'. [ 274.905946][T10857] netlink: 'syz.5.1177': attribute type 2 has an invalid length. [ 274.934477][T10854] netlink: 'syz.0.1179': attribute type 1 has an invalid length. [ 274.934503][T10854] netlink: 756 bytes leftover after parsing attributes in process `syz.0.1179'. [ 274.938001][ T4932] Bluetooth: hci6: link tx timeout [ 274.938151][ T4932] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.978837][ T4932] Bluetooth: hci6: link tx timeout [ 274.978861][ T4932] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.979011][ T4932] Bluetooth: hci6: link tx timeout [ 274.979023][ T4932] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.979144][ T4932] Bluetooth: hci6: link tx timeout [ 274.979156][ T4932] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.979269][ T4932] Bluetooth: hci6: link tx timeout [ 274.979281][ T4932] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.979385][ T4932] Bluetooth: hci6: link tx timeout [ 274.979397][ T4932] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.979501][ T4932] Bluetooth: hci6: link tx timeout [ 274.979513][ T4932] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.979617][ T4932] Bluetooth: hci6: link tx timeout [ 274.979628][ T4932] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.979732][ T4932] Bluetooth: hci6: link tx timeout [ 274.979743][ T4932] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.979844][ T4932] Bluetooth: hci6: link tx timeout [ 274.979855][ T4932] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.979941][ T4932] Bluetooth: hci6: link tx timeout [ 274.979951][ T4932] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.980032][ T4932] Bluetooth: hci6: link tx timeout [ 274.980042][ T4932] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.980136][ T4932] Bluetooth: hci6: link tx timeout [ 274.980145][ T4932] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.980230][ T4932] Bluetooth: hci6: link tx timeout [ 274.980238][ T4932] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.980343][ T4932] Bluetooth: hci6: link tx timeout [ 274.980353][ T4932] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.980442][ T4932] Bluetooth: hci6: link tx timeout [ 274.980453][ T4932] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.980558][ T4932] Bluetooth: hci6: link tx timeout [ 274.982208][ T4932] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.991133][ C0] net_ratelimit: 63 callbacks suppressed [ 274.991154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.991635][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.457219][T10865] 8021q: adding VLAN 0 to HW filter on device bond8 [ 275.727133][T10881] netlink: 'syz.3.1183': attribute type 1 has an invalid length. [ 275.738655][T10887] netlink: 'syz.5.1184': attribute type 1 has an invalid length. [ 275.839378][T10894] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 275.865725][T10881] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.923631][T10899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1187'. [ 275.985729][T10887] bond5: entered promiscuous mode [ 275.987327][T10887] 8021q: adding VLAN 0 to HW filter on device bond5 [ 275.989586][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'. [ 276.044798][T10891] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 276.044830][T10891] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 276.044846][T10891] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 276.153173][T10896] syzkaller1: entered promiscuous mode [ 276.153192][T10896] syzkaller1: entered allmulticast mode [ 276.347595][T10914] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 276.755736][T10936] netlink: 'syz.3.1192': attribute type 7 has an invalid length. [ 276.755764][T10936] netlink: 'syz.3.1192': attribute type 3 has an invalid length. [ 276.755777][T10936] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1192'. [ 276.803692][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'. [ 276.997526][ T4932] Bluetooth: hci6: command 0x0406 tx timeout [ 277.164814][T10954] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1195'. [ 277.186657][T10956] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1196'. [ 277.425262][T10966] syzkaller0: entered promiscuous mode [ 277.425287][T10966] syzkaller0: entered allmulticast mode [ 277.434878][T10966] tipc: Enabled bearer , priority 0 [ 277.453647][T10961] tipc: Resetting bearer [ 277.529562][T10972] netlink: 'syz.6.1199': attribute type 4 has an invalid length. [ 277.530503][T10961] tipc: Disabling bearer [ 277.542411][T10973] netlink: 'syz.5.1200': attribute type 21 has an invalid length. [ 277.574879][T10967] netlink: 'syz.6.1199': attribute type 4 has an invalid length. [ 277.614821][T10975] ksmbd: Unknown IPC event: 1, ignore. [ 277.615240][T10975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1201'. [ 277.646395][T10976] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.553896][T11008] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 278.831466][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.832099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.832640][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.448007][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 280.159467][ T6685] IPVS: starting estimator thread 0... [ 280.160188][T11070] sctp: [Deprecated]: syz.6.1228 (pid 11070) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.160188][T11070] Use struct sctp_sack_info instead [ 280.169827][T11071] IPVS: set_ctl: invalid protocol: 0 172.30.16.2:21 [ 280.211279][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1228'. [ 280.213759][T11071] IPVS: stopping master sync thread 9261 ... [ 280.260843][T11073] IPVS: using max 30 ests per chain, 72000 per kthread [ 280.437582][T11076] netlink: 'syz.6.1230': attribute type 6 has an invalid length. [ 280.437607][T11076] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1230'. [ 280.456281][T11080] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 280.822470][T11102] x9: renamed from bridge_slave_0 (while UP) [ 280.987814][T11108] netlink: 'syz.0.1239': attribute type 10 has an invalid length. [ 281.043237][T11117] netlink: 'syz.0.1239': attribute type 10 has an invalid length. [ 281.087971][T11119] __nla_validate_parse: 2 callbacks suppressed [ 281.087993][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1241'. [ 281.329607][T11108] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 281.361537][T11108] team0: Port device netdevsim1 added [ 281.382926][T11112] netlink: 'syz.6.1241': attribute type 12 has an invalid length. [ 281.421893][T11137] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1242'. [ 281.423936][T11117] team0: Port device netdevsim1 removed [ 281.429225][T11117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 281.506653][T11117] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 281.908561][T11142] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.908717][T11142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.910745][T11142] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.910879][T11142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.940123][T11142] veth0_vlan: left promiscuous mode [ 281.943677][T11142] veth0_vlan: entered promiscuous mode [ 282.027191][T11142] 8021q: adding VLAN 0 to HW filter on device bond5 [ 282.029412][T11142] bond5: entered allmulticast mode [ 282.036930][T11142] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 282.116511][T11142] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 282.173803][ T6687] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 282.174105][ T6683] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 282.175351][ T5743] syz1: Port: 1 Link ACTIVE [ 282.244622][ T6683] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 282.291104][ T6683] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 282.291163][ T6683] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 282.468846][T11169] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1249'. [ 282.468876][T11169] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1249'. [ 282.751943][ T4932] Bluetooth: hci6: command 0x0406 tx timeout [ 283.422047][T11200] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1256'. [ 283.446273][T11200] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1256'. [ 283.536981][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'. [ 283.550455][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1257'. [ 283.550502][T11206] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1257'. [ 283.684345][T11210] IPv6: addrconf: prefix option has invalid lifetime [ 283.889001][T11224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.908085][T11226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.960208][T11230] netlink: 'syz.3.1265': attribute type 1 has an invalid length. [ 283.960230][T11230] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1265'. [ 284.033586][T11231] syzkaller0: entered promiscuous mode [ 284.033613][T11231] syzkaller0: entered allmulticast mode [ 284.591831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.592283][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.592646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.923736][T11255] netlink: 'syz.1.1269': attribute type 14 has an invalid length. [ 286.350833][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 286.695930][T11244] tc_dump_action: action bad kind [ 286.775437][T11255] __nla_validate_parse: 6 callbacks suppressed [ 286.775460][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1269'. [ 286.780989][T11255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1269'. [ 286.781019][T11255] netlink: 'syz.1.1269': attribute type 14 has an invalid length. [ 286.928788][T11262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1272'. [ 287.478186][T11291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1277'. [ 288.287420][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'. [ 288.646278][T11332] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 288.911306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.913262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.913993][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.443670][T11340] syzkaller0: entered promiscuous mode [ 289.443698][T11340] syzkaller0: entered allmulticast mode [ 290.334559][T11396] syzkaller0: entered promiscuous mode [ 290.334587][T11396] syzkaller0: entered allmulticast mode [ 292.278115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.435006][T11450] block nbd1: server does not support multiple connections per device. [ 293.435372][T11450] block nbd1: shutting down sockets [ 293.464041][T11455] netlink: 'syz.1.1308': attribute type 39 has an invalid length. [ 293.517777][T11448] bond6 (unregistering): Released all slaves [ 293.873558][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1312'. [ 294.037196][T11480] xt_esp: unknown flags DD [ 294.219211][T11450] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 294.219242][T11450] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 294.338806][T11450] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 294.338835][T11450] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 294.441063][T11450] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 294.441092][T11450] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 294.483215][T11450] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 294.483244][T11450] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 294.496230][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1321'. [ 294.507345][T11500] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1321'. [ 294.535747][T11450] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 294.535774][T11450] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 294.648915][T11450] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 294.648944][T11450] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 294.911151][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 295.306144][T11528] netlink: 4564 bytes leftover after parsing attributes in process `syz.0.1327'. [ 295.306173][T11528] openvswitch: netlink: Flow key attr not present in new flow. [ 295.415383][T11535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.473468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.474145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.474834][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.475445][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.583817][T11542] netlink: 4564 bytes leftover after parsing attributes in process `syz.0.1327'. [ 295.583977][T11542] openvswitch: netlink: Flow key attr not present in new flow. [ 295.648318][T11548] netlink: 'syz.1.1330': attribute type 7 has an invalid length. [ 295.661443][T11528] tipc: Started in network mode [ 295.661468][T11528] tipc: Node identity 1000001, cluster identity 4369 [ 295.661481][T11528] tipc: Node number set to 16777217 [ 295.692530][T11536] tipc: Enabling of bearer rejected, failed to enable media [ 295.719773][T11549] tipc: Enabling of bearer rejected, failed to enable media [ 295.892856][T11557] netlink: 'syz.0.1332': attribute type 2 has an invalid length. [ 296.031977][T11557] : entered promiscuous mode [ 296.165963][T11565] netlink: 'syz.3.1335': attribute type 5 has an invalid length. [ 296.466536][T11585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1341'. [ 297.723221][T11624] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1351'. [ 297.724521][T11624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1351'. [ 297.839007][T11622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1350'. [ 297.839040][T11622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1350'. [ 298.134834][T11638] ip_tables: iptables: counters copy to user failed while replacing table [ 298.360368][T11650] netlink: 'syz.5.1359': attribute type 2 has an invalid length. [ 298.390471][T11650] : entered promiscuous mode [ 298.530071][T11650] netlink: 'syz.5.1359': attribute type 1 has an invalid length. [ 298.892270][T11669] __nla_validate_parse: 3 callbacks suppressed [ 298.892293][T11669] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1362'. [ 299.014319][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1363'. [ 299.332481][T11695] netlink: 'syz.5.1368': attribute type 8 has an invalid length. [ 299.332508][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1368'. [ 299.333214][T11695] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.527238][T11703] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 299.693959][T11708] syz.5.1372: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 299.694039][T11708] CPU: 1 UID: 0 PID: 11708 Comm: syz.5.1372 Not tainted syzkaller #0 PREEMPT(full) [ 299.694062][T11708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.694074][T11708] Call Trace: [ 299.694083][T11708] [ 299.694093][T11708] dump_stack_lvl+0xe8/0x150 [ 299.694129][T11708] warn_alloc+0x24d/0x270 [ 299.694152][T11708] ? kasan_save_track+0x4f/0x80 [ 299.694183][T11708] ? kasan_save_track+0x3e/0x80 [ 299.694207][T11708] ? __pfx_warn_alloc+0x10/0x10 [ 299.694225][T11708] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 299.694252][T11708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.694295][T11708] __vmalloc_node_range_noprof+0x127/0x1540 [ 299.694352][T11708] ? rcu_is_watching+0x16/0xb0 [ 299.694384][T11708] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 299.694414][T11708] ? __kmalloc_cache_noprof+0x321/0x600 [ 299.694435][T11708] ? __kmalloc_cache_noprof+0x14d/0x600 [ 299.694464][T11708] ? xskq_create+0x56/0x220 [ 299.694490][T11708] xskq_create+0x148/0x220 [ 299.694512][T11708] ? xsk_init_queue+0x8a/0xe0 [ 299.694537][T11708] xsk_init_queue+0x8a/0xe0 [ 299.694563][T11708] xsk_setsockopt+0x52a/0x960 [ 299.694587][T11708] ? __pfx_xsk_setsockopt+0x10/0x10 [ 299.694609][T11708] ? __pfx_aa_sk_perm+0x10/0x10 [ 299.694644][T11708] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 299.694668][T11708] ? __pfx_xsk_setsockopt+0x10/0x10 [ 299.694690][T11708] do_sock_setsockopt+0x17c/0x1b0 [ 299.694722][T11708] __x64_sys_setsockopt+0x13d/0x1b0 [ 299.694755][T11708] do_syscall_64+0x166/0x520 [ 299.694779][T11708] ? trace_irq_disable+0x3b/0x140 [ 299.694800][T11708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.694820][T11708] ? clear_bhb_loop+0x70/0xc0 [ 299.694846][T11708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.694867][T11708] RIP: 0033:0x7f555939e159 [ 299.694892][T11708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.694909][T11708] RSP: 002b:00007f555a1ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 299.694932][T11708] RAX: ffffffffffffffda RBX: 00007f5559625fa0 RCX: 00007f555939e159 [ 299.694948][T11708] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 299.694960][T11708] RBP: 00007f555943506b R08: 0000000000000004 R09: 0000000000000000 [ 299.694972][T11708] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.694983][T11708] R13: 00007f5559626038 R14: 00007f5559625fa0 R15: 00007ffcfdfe2c98 [ 299.695018][T11708] [ 299.695040][T11708] Mem-Info: [ 299.695050][T11708] active_anon:6775 inactive_anon:0 isolated_anon:0 [ 299.695050][T11708] active_file:11 inactive_file:43052 isolated_file:0 [ 299.695050][T11708] unevictable:17 dirty:36 writeback:0 [ 299.695050][T11708] slab_reclaimable:11415 slab_unreclaimable:114858 [ 299.695050][T11708] mapped:39753 shmem:518 pagetables:1419 [ 299.695050][T11708] sec_pagetables:0 bounce:0 [ 299.695050][T11708] kernel_misc_reclaimable:0 [ 299.695050][T11708] free:1264608 free_pcp:11289 free_cma:0 [ 299.695103][T11708] Node 0 active_anon:27100kB inactive_anon:0kB active_file:44kB inactive_file:172008kB unevictable:68kB isolated(anon):0kB isolated(file):0kB mapped:159012kB dirty:144kB writeback:0kB shmem:2072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15568kB pagetables:5540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 299.695161][T11708] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 299.695212][T11708] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.695270][T11708] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 299.695312][T11708] Node 0 DMA32 free:1098720kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:27100kB inactive_anon:0kB active_file:44kB inactive_file:172008kB unevictable:68kB writepending:144kB zspages:0kB present:3129332kB managed:2546940kB mlocked:68kB bounce:0kB free_pcp:45152kB local_pcp:25188kB free_cma:0kB [ 299.695368][T11708] lowmem_reserve[]: 0 0 0 0 0 [ 299.695403][T11708] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.698657][T11708] lowmem_reserve[]: 0 0 0 0 0 [ 299.698704][T11708] Node 1 Normal free:3944352kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.698765][T11708] lowmem_reserve[]: 0 0 0 0 0 [ 299.698805][T11708] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 299.698939][T11708] Node 0 DMA32: 885*4kB (UM) 647*8kB (UM) 226*16kB (UME) 215*32kB (UE) 205*64kB (UE) 210*128kB (UME) 103*256kB (UM) 17*512kB (UM) 3*1024kB (UE) 1*2048kB (M) 244*4096kB (UM) = 1098828kB [ 299.699114][T11708] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 299.699226][T11708] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 5*16kB (UM) 12*32kB (UM) 7*64kB (UM) 2*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944352kB [ 299.699415][T11708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.699432][T11708] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 299.699457][T11708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.699474][T11708] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 299.699490][T11708] 43577 total pagecache pages [ 299.699499][T11708] 0 pages in swap cache [ 299.699507][T11708] Free swap = 124996kB [ 299.699515][T11708] Total swap = 124996kB [ 299.699524][T11708] 2097051 pages RAM [ 299.699533][T11708] 0 pages HighMem/MovableOnly [ 299.699540][T11708] 428700 pages reserved [ 299.699549][T11708] 0 pages cma reserved [ 300.087329][T11717] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1375'. [ 300.145493][T11717] syzkaller1: entered promiscuous mode [ 300.145516][T11717] syzkaller1: entered allmulticast mode [ 300.168156][T11717] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1375'. [ 300.168485][T11718] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1375'. [ 300.175439][T11720] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1376'. [ 300.588886][T11729] tc action pedit offset must be on 32 bit boundaries [ 300.599197][T11727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1378'. [ 300.680432][T11732] netlink: 'syz.5.1382': attribute type 1 has an invalid length. [ 300.727350][T11733] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1378'. [ 300.744587][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1382'. [ 301.231847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.233130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.233791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.234409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.867939][T11758] netlink: 'syz.0.1389': attribute type 30 has an invalid length. [ 302.066763][T11758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.219305][T11758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.786854][T11784] syzkaller0: entered promiscuous mode [ 302.786885][T11784] syzkaller0: entered allmulticast mode [ 303.980397][T11846] openvswitch: netlink: Missing key (keys=40, expected=100) [ 304.058727][T11848] xt_hashlimit: size too large, truncated to 1048576 [ 304.196708][T11851] xt_hashlimit: size too large, truncated to 1048576 [ 306.742641][T11824] syzkaller0: entered promiscuous mode [ 306.742667][T11824] syzkaller0: entered allmulticast mode [ 306.821018][T11852] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.821059][T11852] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.992136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.992824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.993451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.994268][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.807311][T11897] netlink: 'syz.6.1418': attribute type 1 has an invalid length. [ 309.926508][T11902] __nla_validate_parse: 2 callbacks suppressed [ 309.926531][T11902] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1418'. [ 309.975773][T11905] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1418'. [ 310.039280][T11897] bond3: entered promiscuous mode [ 310.039787][T11897] 8021q: adding VLAN 0 to HW filter on device bond3 [ 310.487164][T11924] netlink: 'syz.6.1422': attribute type 1 has an invalid length. [ 310.746231][T11938] netlink: 'syz.1.1424': attribute type 1 has an invalid length. [ 310.746258][T11938] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1424'. [ 310.933922][T11938] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1424'. [ 311.934608][ T30] audit: type=1800 audit(1789953908.326:4): pid=11982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1431" name="blkio.bfq.time_recursive" dev="tmpfs" ino=580 res=0 errno=0 [ 312.000334][T11985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1432'. [ 312.042281][ T30] audit: type=1800 audit(1789953908.436:5): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1431" name="blkio.bfq.time_recursive" dev="tmpfs" ino=580 res=0 errno=0 [ 312.341744][T11994] syzkaller0: entered promiscuous mode [ 312.341770][T11994] syzkaller0: entered allmulticast mode [ 312.396219][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1436'. [ 312.399249][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1436'. [ 312.751641][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.752369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.753039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.830823][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 312.866781][T12028] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1440'. [ 313.074149][T12034] netlink: 29792 bytes leftover after parsing attributes in process `syz.3.1441'. [ 313.095905][T12034] hsr_slave_1 (unregistering): left promiscuous mode [ 313.683493][T12056] nbd1: detected capacity change from 0 to 32 [ 313.684637][ T5621] block nbd1: Receive control failed (result -22) [ 313.688859][ T1988] block nbd1: Dead connection, failed to find a fallback [ 313.688885][ T1988] block nbd1: shutting down sockets [ 313.688899][ T1988] blk_print_req_error: 97 callbacks suppressed [ 313.688911][ T1988] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.689715][ T1988] buffer_io_error: 138 callbacks suppressed [ 313.689731][ T1988] Buffer I/O error on dev nbd1, logical block 0, async page read [ 313.748628][ T1988] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.748676][ T1988] Buffer I/O error on dev nbd1, logical block 0, async page read [ 313.748803][ T1988] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.748830][ T1988] Buffer I/O error on dev nbd1, logical block 0, async page read [ 313.748947][ T1988] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.748971][ T1988] Buffer I/O error on dev nbd1, logical block 0, async page read [ 313.749088][ T1988] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.749113][ T1988] Buffer I/O error on dev nbd1, logical block 0, async page read [ 313.833691][ T1988] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.833726][ T1988] Buffer I/O error on dev nbd1, logical block 0, async page read [ 313.833881][ T1988] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.833907][ T1988] Buffer I/O error on dev nbd1, logical block 0, async page read [ 313.835518][ T1988] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.835547][ T1988] Buffer I/O error on dev nbd1, logical block 0, async page read [ 313.835586][T11384] ldm_validate_partition_table(): Disk read failed. [ 313.835693][ T1988] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.835718][ T1988] Buffer I/O error on dev nbd1, logical block 0, async page read [ 313.835822][ T1988] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.835845][ T1988] Buffer I/O error on dev nbd1, logical block 0, async page read [ 313.836054][T11384] Dev nbd1: unable to read RDB block 0 [ 313.836515][T11384] nbd1: unable to read partition table [ 313.939229][T11384] ldm_validate_partition_table(): Disk read failed. [ 313.942953][T11384] Dev nbd1: unable to read RDB block 0 [ 313.945229][T11384] nbd1: unable to read partition table [ 314.568621][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 314.852742][T12087] syzkaller0: entered promiscuous mode [ 314.852770][T12087] syzkaller0: entered allmulticast mode [ 314.949277][ T30] audit: type=1804 audit(1789953911.336:6): pid=12101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1455" name="/newroot/238/cgroup.controllers" dev="tmpfs" ino=1252 res=1 errno=0 [ 314.953912][ T30] audit: type=1800 audit(1789953911.346:7): pid=12101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1455" name="cgroup.controllers" dev="tmpfs" ino=1252 res=0 errno=0 [ 315.522095][T12125] __nla_validate_parse: 2 callbacks suppressed [ 315.522119][T12125] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1459'. [ 315.522428][T12125] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1459'. [ 315.522688][T12125] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1459'. [ 315.522984][T12125] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1459'. [ 315.523248][T12125] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1459'. [ 315.523498][T12125] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1459'. [ 315.592150][T12125] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1459'. [ 315.592396][T12125] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1459'. [ 315.592650][T12125] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1459'. [ 315.592916][T12125] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1459'. [ 315.891663][T12138] syzkaller1: entered promiscuous mode [ 315.891689][T12138] syzkaller1: entered allmulticast mode [ 316.033684][T12143] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 316.034439][T12143] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 316.160898][T12140] netlink: 'syz.0.1463': attribute type 4 has an invalid length. [ 316.271618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.272346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.272997][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.273621][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.655154][T12172] netlink: 'syz.5.1472': attribute type 40 has an invalid length. [ 316.679859][T12172] batadv0: entered promiscuous mode [ 316.684492][T12172] macsec1: entered promiscuous mode [ 316.684706][T12172] macsec1: entered allmulticast mode [ 316.684718][T12172] batadv0: entered allmulticast mode [ 316.688544][T12172] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 316.715156][T12175] netlink: 'syz.5.1472': attribute type 1 has an invalid length. [ 316.770432][T12172] batadv0: left allmulticast mode [ 316.771919][T12172] batadv0: left promiscuous mode [ 317.120804][T12186] 8021q: VLANs not supported on ip_vti0 [ 317.281500][T12193] netlink: 'syz.6.1479': attribute type 1 has an invalid length. [ 317.310778][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.548087][T12193] 8021q: adding VLAN 0 to HW filter on device bond5 [ 317.775233][T12203] bond5: (slave gretap1): making interface the new active one [ 317.801236][T12203] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 318.486343][T12237] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 318.906964][ T5278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 319.202694][T12264] bond3: entered promiscuous mode [ 319.202789][T12264] bond3: entered allmulticast mode [ 319.472043][T12279] IPv6: NLM_F_CREATE should be specified when creating new route [ 319.472147][T12279] IPv6: Can't replace route, no match found [ 321.538195][T12349] tipc: Enabling of bearer rejected, already enabled [ 321.540277][T12349] __nla_validate_parse: 66 callbacks suppressed [ 321.540298][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1509'. [ 321.550680][T12350] netlink: 'syz.6.1509': attribute type 1 has an invalid length. [ 321.617577][T12350] bond6: entered promiscuous mode [ 321.618334][T12350] 8021q: adding VLAN 0 to HW filter on device bond6 [ 321.924248][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'. [ 322.005671][T12367] bond4: entered allmulticast mode [ 322.112045][T12372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'. [ 322.143969][T12369] 8021q: adding VLAN 0 to HW filter on device bond5 [ 322.161811][T12369] bond5: entered allmulticast mode [ 322.162774][T12369] bond4: (slave bond5): Enslaving as an active interface with an up link [ 322.289955][T12367] bond4 (unregistering): (slave bond5): Releasing backup interface [ 322.309052][T12367] bond5: left allmulticast mode [ 322.324087][T12367] bond4 (unregistering): Released all slaves [ 322.351886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.352673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.353418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.477065][T12372] bond4: entered allmulticast mode [ 322.479230][T12376] bond4 (unregistering): Released all slaves [ 322.816653][T12388] nbd2: detected capacity change from 0 to 32 [ 322.817840][ T5621] block nbd2: Receive control failed (result -22) [ 322.819110][ T1988] block nbd2: Dead connection, failed to find a fallback [ 322.819133][ T1988] block nbd2: shutting down sockets [ 322.819147][ T1988] blk_print_req_error: 27 callbacks suppressed [ 322.819159][ T1988] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 322.819185][ T1988] buffer_io_error: 27 callbacks suppressed [ 322.819229][ T1988] Buffer I/O error on dev nbd2, logical block 0, async page read [ 322.819376][ T1988] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 322.819403][ T1988] Buffer I/O error on dev nbd2, logical block 0, async page read [ 322.819758][ T1988] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 322.819784][ T1988] Buffer I/O error on dev nbd2, logical block 0, async page read [ 322.914112][ T1988] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 322.914146][ T1988] Buffer I/O error on dev nbd2, logical block 0, async page read [ 322.914277][ T1988] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 322.914302][ T1988] Buffer I/O error on dev nbd2, logical block 0, async page read [ 322.914476][ T1988] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 322.914501][ T1988] Buffer I/O error on dev nbd2, logical block 0, async page read [ 322.914946][ T1988] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 322.914973][ T1988] Buffer I/O error on dev nbd2, logical block 0, async page read [ 322.915111][ T1988] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 322.915136][ T1988] Buffer I/O error on dev nbd2, logical block 0, async page read [ 322.915180][T11384] ldm_validate_partition_table(): Disk read failed. [ 322.915274][ T1988] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 322.915299][ T1988] Buffer I/O error on dev nbd2, logical block 0, async page read [ 322.915415][ T1988] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 322.915440][ T1988] Buffer I/O error on dev nbd2, logical block 0, async page read [ 322.916469][T11384] Dev nbd2: unable to read RDB block 0 [ 322.917201][T11384] nbd2: unable to read partition table [ 322.985639][T12392] netlink: 'syz.5.1516': attribute type 4 has an invalid length. [ 323.070426][T12398] netlink: 'syz.5.1516': attribute type 4 has an invalid length. [ 323.111687][T11384] ldm_validate_partition_table(): Disk read failed. [ 323.114076][T11384] Dev nbd2: unable to read RDB block 0 [ 323.114611][T11384] nbd2: unable to read partition table [ 323.883730][T12420] netlink: 'syz.3.1523': attribute type 1 has an invalid length. [ 323.917629][T12420] veth7: entered allmulticast mode [ 324.309069][T12444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1529'. [ 324.849226][T12455] syzkaller0: entered promiscuous mode [ 324.849252][T12455] syzkaller0: entered allmulticast mode [ 324.865283][T12464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.865665][T12464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.877726][T12464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.908626][T12464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.908751][T12464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.908968][T12464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.909217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.082359][T12475] netlink: 'syz.1.1536': attribute type 1 has an invalid length. [ 325.205889][T12475] 8021q: adding VLAN 0 to HW filter on device bond9 [ 325.235088][T12478] bond9: (slave veth0_to_bond): making interface the new active one [ 325.236709][T12478] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 325.728239][T12494] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1540'. [ 327.342080][T12504] netlink: 'syz.3.1543': attribute type 2 has an invalid length. [ 327.725688][ T8624] net_ratelimit: 123 callbacks suppressed [ 327.725713][ T8624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.781773][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1545'. [ 328.475059][T12481] bond9: entered promiscuous mode [ 328.475079][T12481] veth0_to_bond: entered promiscuous mode [ 328.475219][T12481] bond9: entered allmulticast mode [ 328.475228][T12481] veth0_to_bond: entered allmulticast mode [ 328.488039][T12473] macvlan2: entered promiscuous mode [ 328.488061][T12473] macvlan2: entered allmulticast mode [ 328.489572][T12473] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 328.493720][T12473] bond9: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 328.594966][T12519] netlink: 404 bytes leftover after parsing attributes in process `syz.5.1546'. [ 328.605030][T12512] syzkaller1: entered promiscuous mode [ 328.605051][T12512] syzkaller1: entered allmulticast mode [ 328.723240][T12522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.769043][ T8624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.874702][T12529] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1547'. [ 328.982401][T12535] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 329.043653][T12534] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1548'. [ 329.120068][T12538] tc action pedit offset must be on 32 bit boundaries [ 329.169374][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.392773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.393574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.394304][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.480373][T12552] tipc: Enabling of bearer rejected, media not registered [ 329.553855][T12555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1557'. [ 329.775102][T12563] netlink: 'syz.5.1561': attribute type 1 has an invalid length. [ 329.787117][T12567] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 329.837802][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.870009][T12563] 8021q: adding VLAN 0 to HW filter on device bond7 [ 330.087609][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1562'. [ 330.380018][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1562'. [ 330.499152][T12592] netlink: 'syz.3.1564': attribute type 7 has an invalid length. [ 330.916108][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.983467][T12595] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1565'. [ 330.984006][T12595] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1565'. [ 330.985511][T12595] pim6reg1: entered promiscuous mode [ 330.985532][T12595] pim6reg1: entered allmulticast mode [ 331.998766][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.080192][T12620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1572'. [ 332.297551][T12617] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 332.325848][T12617] bond5 (unregistering): Released all slaves [ 332.405535][T12613] bond4: option tlb_dynamic_lb: invalid value (10) [ 332.408750][T12613] bond4 (unregistering): Released all slaves [ 332.623642][T12638] bond0: Unable to set up delay as MII monitoring is disabled [ 332.889364][T12649] netlink: 'syz.0.1581': attribute type 2 has an invalid length. [ 333.072936][ T8627] net_ratelimit: 6 callbacks suppressed [ 333.072957][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.198654][T12657] batman_adv: batadv0: Adding interface: macvlan3 [ 333.198673][T12657] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.198704][T12657] batman_adv: batadv0: Interface activated: macvlan3 [ 333.725098][T12681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.910765][T12687] __nla_validate_parse: 1 callbacks suppressed [ 333.910795][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1591'. [ 333.944018][T12687] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 333.950395][T12688] netlink: 'syz.0.1589': attribute type 1 has an invalid length. [ 334.111205][ T8623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.148714][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1589'. [ 334.164788][T12688] 8021q: adding VLAN 0 to HW filter on device bond4 [ 334.375637][T12712] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1594'. [ 335.152288][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.231889][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.874995][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.191036][ T8623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.231128][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.730693][T12754] tipc: Enabling of bearer rejected, failed to enable media [ 337.790869][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 337.869098][T12771] netlink: 'syz.3.1602': attribute type 6 has an invalid length. [ 337.869124][T12771] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1602'. [ 337.870510][T12769] Bluetooth: hci0: unsupported parameter 5134 [ 337.873734][T12769] Bluetooth: hci0: unsupported parameter 8192 [ 337.873754][T12769] Bluetooth: hci0: unsupported parameter 5134 [ 337.873765][T12769] Bluetooth: hci0: unsupported parameter 8192 [ 337.936505][T12769] pim6reg1: entered promiscuous mode [ 337.936530][T12769] pim6reg1: entered allmulticast mode [ 338.270936][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.271259][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.351598][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.352368][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.353065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.849255][T12829] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1612'. [ 338.849284][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1612'. [ 338.849297][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'. [ 339.033236][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1611'. [ 339.311394][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.344717][T12844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1617'. [ 339.419152][T12844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1617'. [ 339.419178][T12844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1617'. [ 339.697850][T12844] veth7: entered allmulticast mode [ 339.743507][T12844] bond5: (slave veth7): Enslaving as an active interface with an up link [ 340.093077][T12860] batman_adv: batadv0: Adding interface: syzkaller0 [ 340.093099][T12860] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.093131][T12860] batman_adv: batadv0: Interface activated: syzkaller0 [ 340.102430][T12860] xt_l2tp: wrong L2TP version: 0 [ 340.159725][T12867] netlink: 'syz.0.1621': attribute type 1 has an invalid length. [ 340.291223][T12860] netlink: 'syz.5.1622': attribute type 1 has an invalid length. [ 340.291249][T12860] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1622'. [ 340.308434][T12874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1625'. [ 340.351834][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.496836][T12859] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 340.613665][T12859] batman_adv: batadv0: Removing interface: syzkaller0 [ 341.118208][T12899] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1629'. [ 341.312158][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.392827][ T8623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.539159][T12921] IPVS: Error connecting to the multicast addr [ 341.551901][T12922] IPVS: Error connecting to the multicast addr [ 341.638892][T12925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1635'. [ 341.707631][T12928] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1636'. [ 342.199827][T12949] netlink: 'syz.0.1642': attribute type 16 has an invalid length. [ 342.434812][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.488760][T12965] netlink: 'syz.1.1646': attribute type 39 has an invalid length. [ 342.583648][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'. [ 342.843786][T12976] debugfs: '.P'G!DES' already exists in 'ieee80211' [ 342.988752][T12984] netlink: 'syz.5.1654': attribute type 1 has an invalid length. [ 343.110109][T12995] netlink: 'syz.0.1655': attribute type 7 has an invalid length. [ 343.110134][T12995] netlink: 'syz.0.1655': attribute type 3 has an invalid length. [ 343.389111][T13002] vlan3: entered allmulticast mode [ 343.389139][T13002] bond0: entered allmulticast mode [ 343.389152][T13002] bond_slave_0: entered allmulticast mode [ 343.389171][T13002] bond_slave_1: entered allmulticast mode [ 343.391312][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.392024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.392642][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.479272][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.559338][T13016] netlink: 'syz.0.1661': attribute type 10 has an invalid length. [ 343.564907][T13017] netlink: 'syz.0.1661': attribute type 10 has an invalid length. [ 343.977042][T13035] block nbd3: Unsupported socket: should be TCP or UNIX. [ 343.986089][T13035] netlink: 'syz.5.1667': attribute type 1 has an invalid length. [ 343.994914][T13035] ip6tnl2: entered allmulticast mode [ 344.351476][ T969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.513883][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.598500][T13050] veth1_macvtap: left promiscuous mode [ 344.721340][T13059] __nla_validate_parse: 5 callbacks suppressed [ 344.721395][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1674'. [ 344.730400][T13058] tipc: Enabled bearer , priority 0 [ 344.746307][T13058] syzkaller0: entered promiscuous mode [ 344.746330][T13058] syzkaller0: entered allmulticast mode [ 344.768564][T13058] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 344.927919][T13058] tipc: Resetting bearer [ 344.937241][T13070] xt_HMARK: spi-set and port-set can't be combined [ 344.973587][T13058] macsec0: entered promiscuous mode [ 344.973613][T13058] hsr0: entered promiscuous mode [ 345.038211][T13067] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1675'. [ 345.038240][T13067] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1675'. [ 345.038259][T13067] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1675'. [ 345.112731][T13055] tipc: Resetting bearer [ 345.197662][T13055] tipc: Disabling bearer [ 345.473987][ T969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.529489][T13081] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 345.529517][T13081] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 345.556780][ T8623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.767442][T13092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.767630][T13092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.790125][T13095] netlink: 'syz.3.1686': attribute type 1 has an invalid length. [ 345.857244][T13095] bond6: entered promiscuous mode [ 345.866286][T13095] 8021q: adding VLAN 0 to HW filter on device bond6 [ 346.057980][T13105] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1684'. [ 346.177528][T13108] 8021q: adding VLAN 0 to HW filter on device bond6 [ 346.177984][T13108] bond6: (slave xfrm1): The slave device specified does not support setting the MAC address [ 346.178004][T13108] bond6: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 346.218407][T13108] bond6: (slave xfrm1): making interface the new active one [ 346.218435][T13108] xfrm1: entered promiscuous mode [ 346.246445][T13108] bond6: (slave xfrm1): Enslaving as an active interface with an up link [ 346.380769][T13110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1689'. [ 346.648454][T13114] tipc: Enabling of bearer rejected, failed to enable media [ 347.504163][T13136] xt_policy: output policy not valid in PREROUTING and INPUT [ 348.129422][T13159] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1705'. [ 348.141834][T13161] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1706'. [ 348.143736][T13161] pim6reg: left allmulticast mode [ 348.235956][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1707'. [ 348.419444][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1709'. [ 348.676298][ T8623] net_ratelimit: 328 callbacks suppressed [ 348.676384][ T8623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.310888][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 349.714252][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.853270][T13213] hsr_slave_0 (unregistering): left promiscuous mode [ 349.942399][T13222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.942698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.943604][T13197] __nla_validate_parse: 6 callbacks suppressed [ 349.943623][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1715'. [ 350.015658][T13223] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1723'. [ 350.112747][T13216] veth9: entered allmulticast mode [ 350.154946][T13229] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1723'. [ 350.160138][T13223] gretap0: entered promiscuous mode [ 350.204892][T13229] 0{X: renamed from gretap0 [ 350.227976][T13229] 0{X: left promiscuous mode [ 350.227999][T13229] 0{X: entered allmulticast mode [ 350.242048][T13229] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 350.351359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.352186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.418670][T13239] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1727'. [ 350.432431][ T969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.448328][T13235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1726'. [ 350.514757][T13232] netlink: zone id is out of range [ 350.514776][T13232] netlink: zone id is out of range [ 350.523042][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1726'. [ 350.902838][T13257] netlink: 'syz.3.1730': attribute type 8 has an invalid length. [ 351.489218][T13282] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1738'. [ 351.588197][T13283] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1738'. [ 352.161217][T13294] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1742'. [ 352.226294][T13294] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1742'. [ 352.547588][T13305] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 352.716252][T13305] hsr_slave_1 (unregistering): left promiscuous mode [ 353.008241][T13328] netlink: 'syz.3.1750': attribute type 11 has an invalid length. [ 353.144547][T13327] gretap0: left promiscuous mode [ 353.181425][T13327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.184507][T13327] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.190817][T13327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.414937][ T6682] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 353.415059][ T6682] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 353.882923][ T8627] net_ratelimit: 161 callbacks suppressed [ 353.882947][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.271745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.272366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.272940][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.273559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.274155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.528607][T13360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.902825][T13369] netlink: 'syz.3.1759': attribute type 11 has an invalid length. [ 354.917498][ T8623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.156051][T13370] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 355.189978][T13379] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 355.190012][T13379] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 355.300175][T13379] __nla_validate_parse: 5 callbacks suppressed [ 355.300192][T13379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1760'. [ 355.346945][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1760'. [ 355.381040][T13378] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.885993][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1765'. [ 356.220465][ T8627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.334038][T13420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1766'. [ 356.706607][T13387] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.087651][T13387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.124701][T13387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.348845][T13387] bond5: left allmulticast mode [ 357.455739][T13396] tipc: Enabling of bearer rejected, failed to enable media [ 357.511002][ T1018] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.511041][ T1018] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.514060][ T6682] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.514091][ T6682] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.514123][ T6682] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.514144][ T6682] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.519101][ T6582] syz1: Port: 1 Link DOWN [ 357.857706][T13442] xt_hashlimit: size too large, truncated to 1048576 [ 358.155059][T13453] bridge_slave_0 (unregistering): left allmulticast mode [ 358.155090][T13453] bridge_slave_0 (unregistering): left promiscuous mode [ 358.155184][T13453] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.274859][ T31] INFO: task syz.4.670:8875 blocked for more than 143 seconds. [ 358.274887][ T31] Not tainted syzkaller #0 [ 358.274898][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.274909][ T31] task:syz.4.670 state:D stack:26064 pid:8875 tgid:8870 ppid:5623 task_flags:0x400140 flags:0x00080002 [ 358.274967][ T31] Call Trace: [ 358.275041][ T31] [ 358.275103][ T31] __schedule+0x17db/0x58f0 [ 358.275313][ T31] ? __pfx___schedule+0x10/0x10 [ 358.275355][ T31] ? schedule+0x90/0x2b0 [ 358.275383][ T31] schedule+0x164/0x2b0 [ 358.275410][ T31] schedule_preempt_disabled+0x13/0x30 [ 358.275442][ T31] __mutex_lock+0x7c1/0x1550 [ 358.275496][ T31] ? __mutex_lock+0x5d4/0x1550 [ 358.275526][ T31] ? nfsd_nl_listener_get_doit+0x104/0x610 [ 358.276477][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 358.276517][ T31] ? __nlmsg_put+0xef/0x1b0 [ 358.276622][ T31] ? genlmsg_put+0x137/0x2e ** replaying previous printk message ** [ 358.276622][ T31] ? genlmsg_put+0x137/0x2e0 [ 358.276670][ T31] nfsd_nl_listener_get_doit+0x104/0x610 [ 358.276698][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 358.276723][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 358.276758][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 358.276792][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 358.276830][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 358.276900][ T31] genl_rcv_msg+0x614/0x7a0 [ 358.276930][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.276954][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 358.276996][ T31] netlink_rcv_skb+0x226/0x4a0 [ 358.277025][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.277048][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 358.277093][ T31] ? down_read+0x2be/0x330 [ 358.277125][ T31] genl_rcv+0x28/0x40 [ 358.277146][ T31] netlink_unicast+0x7bd/0x940 [ 358.277197][ T31] netlink_sendmsg+0x813/0xb40 [ 358.277239][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.277280][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 358.277388][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.277414][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 358.277501][ T31] ____sys_sendmsg+0x54e/0x850 [ 358.277532][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.277572][ T31] ? import_iovec+0x73/0xa0 [ 358.277642][ T31] ___sys_sendmsg+0x2a5/0x360 [ 358.277668][ T31] ? __lock_acquire+0x747/0x2de0 [ 358.277725][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.277757][ T31] ? futex_wait+0x2a2/0x390 [ 358.277847][ T31] ? __fget_files+0x2a/0x420 [ 358.277901][ T31] ? __fget_files+0x3a2/0x420 [ 358.277939][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 358.277967][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.278013][ T31] do_syscall_64+0x166/0x520 [ 358.278059][ T31] ? trace_irq_disable+0x3b/0x140 [ 358.278094][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.278140][ T31] ? clear_bhb_loop+0x70/0xc0 [ 358.278167][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.278190][ T31] RIP: 0033:0x7f456479e159 [ 358.278240][ T31] RSP: 002b:00007f45656c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.278303][ T31] RAX: ffffffffffffffda RBX: 00007f4564a26270 RCX: 00007f456479e159 [ 358.278318][ T31] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 000000000000000d [ 358.278332][ T31] RBP: 00007f456483506b R08: 0000000000000000 R09: 0000000000000000 [ 358.278347][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.278361][ T31] R13: 00007f4564a26308 R14: 00007f4564a26270 R15: 00007ffca005afa8 [ 358.278397][ T31] [ 358.278449][ T31] [ 358.278449][ T31] Showing all locks held in the system: [ 358.278460][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 358.278540][ T31] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 358.278674][ T31] locks held by kworker/0:1H/1963: 5, last CPU#0: [ 358.278690][ T31] #0: ffff88801b06ad40 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 358.278757][ T31] #1: ffffc9000601fc40 ((work_completion)(&brmctx->query_queue_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 358.278814][ T31] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 358.278897][ T31] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 358.278981][ T31] #4: ffffffff8ea6b8d8 (&nf_conntrack_locks[i]){+.-.}-{3:3}, at: nf_conntrack_double_lock+0x45/0x1a0 [ 358.279059][ T31] locks held by getty/5372: 2, on CPU#1: [ 358.279072][ T31] #0: ffff8880324560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 358.279188][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 358.279234][ T31] locks held by syz-executor/5614: 4, last CPU#0: [ 358.279246][ T31] #0: ffffffff8ee363b0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 358.279296][ T31] #1: ffff88807f5ab6b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 358.279353][ T31] #2: ffff88807aacd038 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 358.279401][ T31] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 358.279465][ T31] locks held by kworker/0:14/6583: 3, on CPU#0: [ 358.279477][ T31] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 358.279523][ T31] #1: ffffc900034f7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 358.279565][ T31] #2: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x209/0x780 [ 358.279653][ T31] locks held by kworker/0:16/6585: 3, on CPU#0: [ 358.279667][ T31] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 358.279717][ T31] #1: ffffc90003407c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 358.279767][ T31] #2: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 358.279870][ T31] locks held by syz.2.212/6807: 2, on CPU#1: [ 358.279884][ T31] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 358.279930][ T31] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 358.279984][ T31] locks held by syz.4.670/8875: 2, on CPU#1: [ 358.279997][ T31] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 358.280043][ T31] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 358.280097][ T31] locks held by syz.1.1769/13442: 1, last CPU#1: [ 358.280109][ T31] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 358.280162][ T31] locks held by syz.1.1769/13453: 4, last CPU#0: [ 358.280174][ T31] #0: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x419/0x810 [ 358.280250][ T31] #1: ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 358.280324][ T31] #2: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 358.280375][ T31] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 358.280433][ T31] locks held by syz.0.1771/13441: 1, on CPU#1: [ 358.280446][ T31] #0: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 358.361148][ T31] locks held by syz.6.1773/13460: 2, on CPU#0: [ 358.361171][ T31] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 358.361233][ T31] #1: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 358.361387][ T31] locks held by sed/13461: 2, last CPU#0: [ 358.361401][ T31] #0: ffff88807aacf678 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 358.362254][ T31] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 358.362305][ T31] locks held by syz-executor/13463: 2, last CPU#0: [ 358.362318][ T31] #0: ffff888067a2e460 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 358.362375][ T31] #1: ffff888076dbf3d8 (&sb->s_type->i_mutex_key#12){++++}-{4:4}, at: lookup_open+0x231/0x1a40 [ 358.362444][ T31] [ 358.362450][ T31] ============================================= [ 358.362450][ T31] [ 358.362458][ T31] NMI backtrace for cpu 0 [ 358.362471][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 358.362490][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.362500][ T31] Call Trace: [ 358.362509][ T31] [ 358.362518][ T31] dump_stack_lvl+0xe8/0x150 [ 358.362552][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 358.362611][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 358.362639][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 358.362669][ T31] sys_info+0x135/0x170 [ 358.362711][ T31] watchdog+0xfd7/0x1030 [ 358.362737][ T31] ? watchdog+0x1c7/0x1030 [ 358.362761][ T31] kthread+0x38b/0x480 [ 358.362779][ T31] ? __pfx_watchdog+0x10/0x10 [ 358.362795][ T31] ? __pfx_kthread+0x10/0x10 [ 358.362814][ T31] ret_from_fork+0x514/0xb70 [ 358.362841][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 358.362858][ T31] ? __switch_to+0xc89/0x1420 [ 358.362905][ T31] ? __pfx_kthread+0x10/0x10 [ 358.362923][ T31] ret_from_fork_asm+0x1a/0x30 [ 358.362963][ T31] [ 358.362991][ T31] Sending NMI from CPU 0 to CPUs 1: [ 358.363017][ C1] NMI backtrace for cpu 1 [ 358.363032][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 358.363053][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.363063][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 358.363116][ C1] Code: e8 2e de 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef e5 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da 24 76 06 cc 44 89 f9 80 e1 07 [ 358.363157][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 358.363174][ C1] RAX: 1ffffffff35a7c00 RBX: 00000000000003fd RCX: 0000000000000000 [ 358.363187][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 358.363199][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 358.363211][ C1] R10: dffffc0000000000 R11: ffffffff8572f400 R12: dffffc0000000000 [ 358.363224][ C1] R13: 0000000000000000 R14: ffffffff9ad3e0c0 R15: 0000000000000000 [ 358.363236][ C1] FS: 0000000000000000(0000) GS:ffff888124dcd000(0000) knlGS:0000000000000000 [ 358.363251][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.363264][ C1] CR2: 00007f555a1abff8 CR3: 00000000443ca000 CR4: 00000000003526f0 [ 358.363285][ C1] Call Trace: [ 358.363293][ C1] [ 358.363302][ C1] wait_for_lsr+0x184/0x2f0 [ 358.363324][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 358.363352][ C1] serial8250_console_write+0xaa1/0x1200 [ 358.363370][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 358.363396][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 358.363414][ C1] ? __schedule+0x17f1/0x58f0 [ 358.363441][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 358.363481][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 358.363503][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 358.363529][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 358.363557][ C1] nbcon_kthread_func+0x679/0x880 [ 358.363578][ C1] ? nbcon_kthread_func+0x163/0x880 [ 358.363597][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 358.363619][ C1] ? __kthread_parkme+0x71/0x1f0 [ 358.363644][ C1] ? __kthread_parkme+0x199/0x1f0 [ 358.363670][ C1] kthread+0x38b/0x480 [ 358.363687][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 358.363705][ C1] ? __pfx_kthread+0x10/0x10 [ 358.363722][ C1] ret_from_fork+0x514/0xb70 [ 358.363740][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 358.363757][ C1] ? __switch_to+0xc89/0x1420 [ 358.363781][ C1] ? __pfx_kthread+0x10/0x10 [ 358.363799][ C1] ret_from_fork_asm+0x1a/0x30 [ 358.363833][ C1] [ 358.376006][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 359.427939][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 359.437057][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.447114][ T31] Call Trace: [ 359.450399][ T31] [ 359.453339][ T31] vpanic+0x56d/0xa60 [ 359.457339][ T31] ? __pfx___schedule+0x10/0x10 [ 359.462205][ T31] ? __pfx_vpanic+0x10/0x10 [ 359.466726][ T31] panic+0xc5/0xd0 [ 359.470452][ T31] ? __pfx_panic+0x10/0x10 [ 359.474889][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 359.480351][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 359.485729][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 359.491894][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 359.498088][ T31] watchdog+0x1030/0x1030 [ 359.502430][ T31] ? watchdog+0x1c7/0x1030 [ 359.506875][ T31] kthread+0x38b/0x480 [ 359.510947][ T31] ? __pfx_watchdog+0x10/0x10 [ 359.515802][ T31] ? __pfx_kthread+0x10/0x10 [ 359.520399][ T31] ret_from_fork+0x514/0xb70 [ 359.524993][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 359.530212][ T31] ? __switch_to+0xc89/0x1420 [ 359.534921][ T31] ? __pfx_kthread+0x10/0x10 [ 359.539696][ T31] ret_from_fork_asm+0x1a/0x30 [ 359.544493][ T31] [ 359.547960][ T31] Kernel Offset: disabled [ 359.552279][ T31] Rebooting in 86400 seconds..